Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-44488 (GCVE-0-2026-44488)
Vulnerability from cvelistv5 – Published: 2026-06-11 15:37 – Updated: 2026-07-31 12:04
VLAI
EPSS
VEX
Title
Axios: Allocation of Resources Without Limits or Throttling in axios
Summary
Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: 'fetch', or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usage when a malicious or compromised server returns an oversized response, when an attacker can supply a large data: URL, or when an application forwards attacker-controlled request bodies through axios while relying on maxBodyLength as a boundary. This vulnerability is fixed in 0.32.0 and 1.16.0.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-770 - Allocation of Resources Without Limits or Throttling
Assigner
References
48 references
Impacted products
72 products
| Vendor | Product | Version | |
|---|---|---|---|
| axios | axios |
Affected:
>= 1.7.0, < 1.16.0
|
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:2.5.20260715-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:2.5.20260715-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:2.6.10-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Data Grid 8.6.2 |
cpe:/a:redhat:jboss_data_grid:8 |
|
| Red Hat | multicluster engine for Kubernetes 2.10 |
Unaffected:
1784312384 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1783351002 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782157085 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1783348181 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1783350952 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782157514 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1783451729 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1784578812 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1779293013 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.9 |
Unaffected:
1779371594 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1782761510 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.7 |
Unaffected:
1783919486 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
|
| Red Hat | Red Hat Developer Hub 1.10 |
Unaffected:
1783448184 , < *
(rpm)
cpe:/a:redhat:rhdh:1.10::el9 |
|
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1781187342 , < *
(rpm)
Unaffected: 1782761244 , < * (rpm) cpe:/a:redhat:rhdh:1.9::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782166952 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783690532 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
1782911957 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
1782127091 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
1782244020 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1781695012 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1784148076 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1781731914 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1784134078 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1784119173 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498475 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782498792 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1781937133 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1782287580 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201894 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782201833 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201696 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782201537 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201851 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782201812 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782231869 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782201466 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1781174698 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
|
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1782253070 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
|
| Red Hat | Red Hat Satellite 6.19 |
Unaffected:
1782243376 , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1784105894 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4 |
|
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3 |
|
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8 |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2 |
|
| Red Hat | Red Hat AMQ Broker 7 |
cpe:/a:redhat:amq_broker:7 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat build of Apache Camel for Spring Boot 4 |
cpe:/a:redhat:camel_spring_boot:4 |
|
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 |
cpe:/a:redhat:apache_camel_hawtio:4 |
|
| Red Hat | Red Hat build of Apicurio Registry 3 |
cpe:/a:redhat:apicurio_registry:3 |
|
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3 |
|
| Red Hat | Red Hat Fuse 7 |
cpe:/a:redhat:jboss_fuse:7 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat Trusted Profile Analyzer |
cpe:/a:redhat:trusted_profile_analyzer:2 |
|
| Red Hat | Self-service automation portal 2 |
cpe:/a:redhat:ansible_portal:2 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-44488",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-11T18:16:26.938269Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-11T18:27:29.931Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-gateway",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.5.20260715-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-platform-ui",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.6.10-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_data_grid:8"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Red Hat Data Grid 8.6.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784312384",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783351002",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157085",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783348181",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783350952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782157514",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783451729",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784578812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779293013",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779371594",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761510",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783919486",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783448184",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-hub-rhel9",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781187342",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782761244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-ui-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783690532",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782911957",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782127091",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-console-rhel9",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782244020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781695012",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784148076",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-monitoring-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781731914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784134078",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784119173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/code-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498475",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/dashboard-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782498792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781937133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782287580",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201833",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201696",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201851",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-ossmc-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782231869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782201466",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-vulnerability-frontend-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781174698",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-host-inventory-frontend-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782253070",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-advisor-frontend-rhel9",
"product": "Red Hat Satellite 6.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782243376",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-ui-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784105894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat-openshift-console-plugin-npm",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-ui-rhel8",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "affected",
"packageName": "mta/mta-ui-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-console-plugin-pf4-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-console-plugin-pf5-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-console-plugin-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel8",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-hub-ui-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp21/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp22/system",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/system-rhel7",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/system-rhel8",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/system-rhel9",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_broker:7"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat AMQ Broker 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-dashboard-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-hub",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:camel_spring_boot:4"
],
"defaultStatus": "unaffected",
"packageName": "axios",
"product": "Red Hat build of Apache Camel for Spring Boot 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apache_camel_hawtio:4"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat build of Apache Camel - HawtIO 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "unaffected",
"packageName": "apicurio/apicurio-registry-ui-rhel8",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:apicurio_registry:3"
],
"defaultStatus": "unaffected",
"packageName": "apicurio/apicurio-registry-ui-rhel9",
"product": "Red Hat build of Apicurio Registry 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gaudi-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_fuse:7"
],
"defaultStatus": "affected",
"packageName": "axios",
"product": "Red Hat Fuse 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-dashboard-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-dashboard-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-automl-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-autorag-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-eval-hub-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-maas-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mod-arch-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-ui-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "container-native-virtualization/kubevirt-console-plugin",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-console-plugin-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_profile_analyzer:2"
],
"defaultStatus": "affected",
"packageName": "rhtpa/rhtpa-trustification-service-rhel9",
"product": "Red Hat Trusted Profile Analyzer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/automation-portal",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_portal:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform/bootc-automation-portal-rhel9",
"product": "Self-service automation portal 2",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-11T15:37:38.013Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS)."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T12:04:52.905Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"name": "RHBZ#2487949",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44488.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41064"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36882"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46903"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20889"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20938"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34374"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26234"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36611"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28964"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40795"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40792"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40768"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33155"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33160"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33163"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33183"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34527"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34525"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41055"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36883"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:20938: Red Hat Advanced Cluster Security for Kubernetes 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:41951: Red Hat Data Grid 8.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:26234: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:29197: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:34530: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:34527: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:34525: Red Hat Satellite 6.19"
},
{
"lang": "en",
"value": "RHSA-2026:42085: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:46885: multicluster engine for Kubernetes 2.10"
},
{
"lang": "en",
"value": "RHSA-2026:41055: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:36883: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-11T17:01:36.836Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-11T15:37:38.013Z",
"value": "Made public."
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "axios",
"vendor": "axios",
"versions": [
{
"status": "affected",
"version": "\u003e= 1.7.0, \u003c 1.16.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: \u0027fetch\u0027, or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usage when a malicious or compromised server returns an oversized response, when an attacker can supply a large data: URL, or when an application forwards attacker-controlled request bodies through axios while relying on maxBodyLength as a boundary. This vulnerability is fixed in 0.32.0 and 1.16.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770: Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-11T15:37:38.013Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"source": {
"advisory": "GHSA-777c-7fjr-54vf",
"discovery": "UNKNOWN"
},
"title": "Axios: Allocation of Resources Without Limits or Throttling in axios"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-44488",
"datePublished": "2026-06-11T15:37:38.013Z",
"dateReserved": "2026-05-06T17:18:51.783Z",
"dateUpdated": "2026-07-31T12:04:52.905Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-44488",
"date": "2026-07-31",
"epss": "0.00622",
"percentile": "0.46379"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-44488\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-06-11T17:16:32.750\",\"lastModified\":\"2026-07-31T13:18:39.850\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: \u0027fetch\u0027, or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usage when a malicious or compromised server returns an oversized response, when an attacker can supply a large data: URL, or when an application forwards attacker-controlled request bodies through axios while relying on maxBodyLength as a boundary. This vulnerability is fixed in 0.32.0 and 1.16.0.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"axios\",\"product\":\"axios\",\"versions\":[{\"version\":\"\u003e= 1.7.0, \u003c 1.16.0\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:2.5.20260715-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:2.5.20260715-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-platform-ui\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:2.6.10-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Data Grid 8.6.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:jboss_data_grid:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1784312384\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1783351002\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782157085\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1783348181\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1783350952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782157514\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1783451729\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1784578812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1779293013\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1779371594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1782761510\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-27/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"1783919486\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.10::el9\"],\"versions\":[{\"version\":\"1783448184\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1781187342\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1782761244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782166952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783690532\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"1782911957\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"1782127091\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"1782244020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781695012\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1784148076\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-monitoring-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1781731914\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1784134078\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1784119173\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/code-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498475\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782498792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1781937133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1782287580\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782201833\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201696\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782201537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201851\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782201812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-ossmc-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782231869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782201466\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-vulnerability-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1781174698\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-host-inventory-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1782253070\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"satellite/iop-advisor-frontend-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"1782243376\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rhtas-console-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1784105894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat-openshift-console-plugin-npm\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf4-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-pf5-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-hub-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp21/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp22/system\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel7\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel8\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/system-rhel9\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AMQ Broker 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:amq_broker:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-hub\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel for Spring Boot 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:camel_spring_boot:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apache Camel - HawtIO 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:apache_camel_hawtio:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel8\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat build of Apicurio Registry 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"apicurio/apicurio-registry-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:apicurio_registry:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-gaudi-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Fuse 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"axios\",\"cpes\":[\"cpe:/a:redhat:jboss_fuse:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-automl-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-autorag-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-eval-hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-maas-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-console-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Profile Analyzer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtpa/rhtpa-trustification-service-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_profile_analyzer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/automation-portal\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Self-service automation portal 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/bootc-automation-portal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_portal:2\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-11T18:16:26.938269Z\",\"id\":\"CVE-2026-44488\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-770\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:*\",\"versionStartIncluding\":\"1.7.0\",\"versionEndExcluding\":\"1.16.0\",\"matchCriteriaId\":\"FA011295-C061-4B62-B200-65333D122A2F\"}]}]}],\"references\":[{\"url\":\"https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20889\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20938\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26234\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28964\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33155\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33163\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33183\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34160\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34374\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34525\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34527\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36611\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36882\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36883\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40768\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40792\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40795\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41055\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41064\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41951\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42078\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42085\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46885\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46903\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-44488\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2487949\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44488.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-31T13:51:40+00:00",
"cve": "CVE-2026-44488",
"id": "CVE-2026-44488",
"initial_release_date": "2026-06-11T15:37:38.013000+00:00",
"product_status:fixed": "152",
"product_status:known_affected": "24",
"product_status:known_not_affected": "5973",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44488.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-03T03:11:25Z",
"cve": "CVE-2026-44488",
"id": "CVE-2026-44488",
"initial_release_date": "2026-07-03T03:11:25Z",
"product_status:known_affected": "3",
"product_status:known_not_affected": "83",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-44488",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-44488.json",
"version": "2"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"axios: Axios: Denial of Service due to unenforced request and response size limits\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.20260715-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.5.20260715-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-gateway\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.6.10-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-platform-ui\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_data_grid:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Data Grid 8.6.2\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784312384\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783351002\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157085\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783348181\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783350952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782157514\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783451729\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784578812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779293013\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779371594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782761510\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783919486\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-27/gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783448184\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781187342\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1782761244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-hub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783690532\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-ui-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782911957\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782127091\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782244020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781695012\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784148076\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781731914\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-monitoring-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784134078\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784119173\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498475\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/code-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782498792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/dashboard-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781937133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782287580\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201833\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201696\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201851\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782231869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-ossmc-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782201466\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781174698\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-vulnerability-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782253070\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-host-inventory-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782243376\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite/iop-advisor-frontend-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784105894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rhtas-console-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat-openshift-console-plugin-npm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf4-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-pf5-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-hub-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp21/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp22/system\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/system-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_broker:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AMQ Broker 7\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/automation-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-hub\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:camel_spring_boot:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel for Spring Boot 4\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apache_camel_hawtio:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apache Camel - HawtIO 4\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:apicurio_registry:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat build of Apicurio Registry 3\", \"packageName\": \"apicurio/apicurio-registry-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-openshift-local-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-gaudi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_fuse:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Fuse 7\", \"packageName\": \"axios\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-automl-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-autorag-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-eval-hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-maas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-console-plugin-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_profile_analyzer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Profile Analyzer\", \"packageName\": \"rhtpa/rhtpa-trustification-service-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/automation-portal\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_portal:2\"], \"vendor\": \"Red Hat\", \"product\": \"Self-service automation portal 2\", \"packageName\": \"ansible-automation-platform/bootc-automation-portal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-11T17:01:36.836Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-11T15:37:38.013Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42078: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34160: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41064: Red Hat Advanced Cluster Management for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36882: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46903: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20889: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20938: Red Hat Advanced Cluster Security for Kubernetes 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34374: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41951: Red Hat Data Grid 8.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36754: Red Hat Developer Hub 1.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26234: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29197: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36611: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28964: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29082: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40795: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40792: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40768: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33155: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33160: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33163: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33173: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33183: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34530: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34527: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34525: Red Hat Satellite 6.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42085: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46885: multicluster engine for Kubernetes 2.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41055: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30650: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36883: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-11T15:37:38.013Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-44488\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2487949\", \"name\": \"RHBZ#2487949\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44488.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41064\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36882\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46903\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20889\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20938\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41951\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36754\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26234\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36611\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28964\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40795\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27063\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40792\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27044\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40768\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33155\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33160\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33163\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33183\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34527\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34525\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42085\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46885\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41055\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30650\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36883\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-31T12:04:52.905Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-44488\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-11T18:16:26.938269Z\"}}}], \"references\": [{\"url\": \"https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-11T18:16:18.709Z\"}}], \"cna\": {\"title\": \"Axios: Allocation of Resources Without Limits or Throttling in axios\", \"source\": {\"advisory\": \"GHSA-777c-7fjr-54vf\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"axios\", \"product\": \"axios\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 1.7.0, \u003c 1.16.0\"}]}], \"references\": [{\"url\": \"https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf\", \"name\": \"https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf\", \"tags\": [\"x_refsource_CONFIRM\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Axios is a promise based HTTP client for the browser and Node.js. Axios versions 1.7.0 through 1.15.x did not enforce configured request and response size limits when requests were sent with the fetch adapter. Applications that selected adapter: \u0027fetch\u0027, or ran in environments where axios resolved to the fetch adapter, could receive or send bodies larger than maxContentLength or maxBodyLength despite those limits being explicitly configured. This can cause resource exhaustion in server-side usage when a malicious or compromised server returns an oversized response, when an attacker can supply a large data: URL, or when an application forwards attacker-controlled request bodies through axios while relying on maxBodyLength as a boundary. This vulnerability is fixed in 0.32.0 and 1.16.0.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-770\", \"description\": \"CWE-770: Allocation of Resources Without Limits or Throttling\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-06-11T15:37:38.013Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-44488\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-31T12:04:52.905Z\", \"dateReserved\": \"2026-05-06T17:18:51.783Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-06-11T15:37:38.013Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:41066
Vulnerability from csaf_redhat - Published: 2026-07-16 19:46 - Updated: 2026-07-31 17:49Summary
Red Hat Security Advisory: Red Hat Quay 3.16.5
Severity
Important
Notes
Topic: Red Hat Quay 3.16.5 is now available with bug fixes.
Details: Quay 3.16.5
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x | — |
Threats
Impact
Important
References
254 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.5 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.5",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41066",
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41066.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.5",
"tracking": {
"current_release_date": "2026-07-31T17:49:06+00:00",
"generator": {
"date": "2026-07-31T17:49:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:41066",
"initial_release_date": "2026-07-16T19:46:27+00:00",
"revision_history": [
{
"date": "2026-07-16T19:46:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T17:49:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783749869"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783749615"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783748503"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783961339"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ab17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3Aa557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel9\u0026tag=1783748085"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Af51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel9\u0026tag=1783748414"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel9\u0026tag=1783748231"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Aa4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel9\u0026tag=1783749100"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ac65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel9\u0026tag=1783748063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Afe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel9\u0026tag=1783955846"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-16T19:46:27+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:7df4998918f382d98fa22a78f6390cd74fc61f7c4bdfebfcc521223012e58f94_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:a4ebf6125dc9f3ec9619b4ef3bc656f32e4f954f758393287e353608f1f22158_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:ad21b5b3e9be86e46da017c3f6c5f21a8ecd5589ec7b8fcfa238a737205a3143_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:1968b253b36566be2ad09057e3249147a3cc292713e538669d1b75460bec6ace_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:3db8bd709ba6e311052f18c8dbcff80907229c33b9bac63a716f3fb3d4fa7358_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:7d4593286c5b733c8ed5ab2c255c762628c6438e68f10e6ee25582c91d628de4_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f51f40e95d73d6ccdc36caa2184a3e2fef4cf9cc0ced017bc7db890ea0a27293_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6716128c395abd6d293c7fdfee76e1f7e3701cbe400befc4e8bc2922db7d0101_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:30689606ecbebba668c36a16892b0e6f7e0c1868933143fa078e7abaea380544_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:50ef0b22a4630bdd2e7355d7284b94aa33c5f424a218d55cb26224a3001cb484_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:75dae1dc7c81d7657ffc4317d80898afe45a0dd78d8739465b7cc95a15f481b8_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:892c8bae38073747321083d3cb6fe0fbd2b1ab6547f8bbbf42f5cd6eac895ed1_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:45713ba39b951f894271777aefa5e7e0f4015d592a3e0a40cca680396f726ca3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:6a208c36a417a6d0b5223f6ddc4b98c2f007ac209db2b2d70875bda6b84b6e42_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:a557d7fb863fb489c60709ac34eaa5c7c2d66961770a8359794e6ec21bd12840_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:ca805ae1448ab106b9b486d158c5c27e27b9bbe0bcc8d11529c3fd521d674a6c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:3a01cd1d9559dbb9a1e8ae6c2bdcafe9596e3225b870cfbf725ea67a5a89e238_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:b17a240fd3c7032b9f098c9a3369a52ee4afaa23aa97a35936bf3fd44243681c_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:c65a8c8d6dc0a191959b7e6d3f8f60afccf49d318d18080d91a059a6163ca4d4_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:197e328cbe22d79da1589720fc5dc79874c84dcbe78928efedb2de9ad8a756a9_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:5bab84aa3a13566f9c38af03862416cc1d6aa5b3a81090bef72d05a9aafe221b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:71ee2ea79064730fbb9682fdd30dc7a455bf5a0a3b0297bdc264f2936876f62a_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:fe189be7d6cc775261c6b7fb58bc9badac2411647874d330d8de6e7f02569230_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:41928
Vulnerability from csaf_redhat - Published: 2026-07-20 08:34 - Updated: 2026-07-31 21:06Summary
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
Severity
Important
Notes
Topic: A new version of Migration Toolkit for Containers (MTC) is now available.
Details: The Migration Toolkit for Containers (MTC) enables you to migrate
Kubernetes resources, persistent volume data, and internal container images
between OpenShift Container Platform clusters, using the MTC web console or
the Kubernetes API.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data. This presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.
5.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response. This path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: 'stream'.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Moderate
A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host's memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server's memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Threats
Impact
Important
A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.
8.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user's browser.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — | ||
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
10 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 | — |
Workaround
|
Threats
Impact
Important
References
448 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of Migration Toolkit for Containers (MTC) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "The Migration Toolkit for Containers (MTC) enables you to migrate\nKubernetes resources, persistent volume data, and internal container images\nbetween OpenShift Container Platform clusters, using the MTC web console or\nthe Kubernetes API.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41928",
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-12816",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-13465",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-15284",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-52881",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58754",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66031",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66418",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66471",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69223",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69227",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-69228",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-7783",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13149",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-21441",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22029",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23745",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42338",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45736",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48779",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9595",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html-single/migration_toolkit_for_containers/index"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41928.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Migration Toolkit for Containers",
"tracking": {
"current_release_date": "2026-07-31T21:06:31+00:00",
"generator": {
"date": "2026-07-31T21:06:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:41928",
"initial_release_date": "2026-07-20T08:34:29+00:00",
"revision_history": [
{
"date": "2026-07-20T08:34:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T21:06:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Migration Toolkit 1.8",
"product": {
"name": "Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhmt:1.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Migration Toolkit"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-controller-rhel8@sha256%3Ac6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-controller-rhel8\u0026tag=1783953372"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-hook-runner-rhel8@sha256%3A02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8\u0026tag=1783931722"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-log-reader-rhel8@sha256%3Aa95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8\u0026tag=1783914253"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-must-gather-rhel8@sha256%3A7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8\u0026tag=1783914261"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-openvpn-rhel8@sha256%3Af7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8\u0026tag=1783914237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rhel8-operator@sha256%3A351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rhel8-operator\u0026tag=1783969382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-operator-bundle@sha256%3A7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-operator-bundle\u0026tag=1783969793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-registry-rhel8@sha256%3A69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-registry-rhel8\u0026tag=1783914276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-rsync-transfer-rhel8@sha256%3A5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8\u0026tag=1783914257"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-ui-rhel8@sha256%3Ad2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-ui-rhel8\u0026tag=1783690532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_id": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift-migration-velero-plugin-for-mtc-rhel8@sha256%3Aee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd?arch=amd64\u0026repository_url=registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8\u0026tag=1783914255"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64 as a component of Red Hat Migration Toolkit 1.8",
"product_id": "Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
},
"product_reference": "registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64",
"relates_to_product_reference": "Red Hat Migration Toolkit 1.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-7783",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"discovery_date": "2025-07-18T17:00:43.396637+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2381959"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability related to predictable random number generation has been discovered in the form-data JavaScript library. The library utilizes Math.random() to determine boundary values for multipart form-encoded data.\n\nThis presents a security risk if an attacker can observe other values generated by Math.random() within the target application and simultaneously control at least one field of a request made using form-data. Under these conditions, the attacker could potentially predict or determine the boundary values. This predictability could be leveraged to bypass security controls, manipulate form data, or potentially lead to data integrity issues or other forms of exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: Unsafe random function in form-data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw does not affect host systems. The impact of this vulnerability is limited to specific applications which integrate the `form-data` library. As a result the impact of this CVE is limited on RedHat systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-7783"
},
{
"category": "external",
"summary": "RHBZ#2381959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2381959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-7783",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0",
"url": "https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4"
}
],
"release_date": "2025-07-18T16:34:44.889000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "form-data: Unsafe random function in form-data"
},
{
"cve": "CVE-2025-12816",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2025-11-25T20:01:05.875196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417097"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in node-forge. This vulnerability allows unauthenticated attackers to bypass downstream cryptographic verifications and security decisions via crafting ASN.1 (Abstract Syntax Notation One) structures to desynchronize schema validations, yielding a semantic divergence.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products due to an interpretation conflict in the node-forge library. An unauthenticated attacker could exploit this flaw by crafting malicious ASN.1 structures, leading to a bypass of cryptographic verifications and security decisions in affected applications. This impacts various Red Hat products that utilize node-forge for cryptographic operations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-12816"
},
{
"category": "external",
"summary": "RHBZ#2417097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-12816",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12816"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge",
"url": "https://github.com/digitalbazaar/forge"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/pull/1124",
"url": "https://github.com/digitalbazaar/forge/pull/1124"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq"
},
{
"category": "external",
"summary": "https://kb.cert.org/vuls/id/521113",
"url": "https://kb.cert.org/vuls/id/521113"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/node-forge",
"url": "https://www.npmjs.com/package/node-forge"
}
],
"release_date": "2025-11-25T19:15:50.243000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications"
},
{
"cve": "CVE-2025-13465",
"cwe": {
"id": "CWE-1321",
"name": "Improperly Controlled Modification of Object Prototype Attributes (\u0027Prototype Pollution\u0027)"
},
"discovery_date": "2026-01-21T20:01:28.774829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lodash. A prototype pollution vulnerability in the _.unset and _.omit functions allows an attacker able to control property paths to delete methods from global prototypes. By removing essential functionalities, this can result in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: prototype pollution in _.unset and _.omit functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is only exploitable by applications using the _.unset and _.omit functions on an object and allowing user input to determine the path of the property to be removed. This issue only allows the deletion of properties but does not allow overwriting their behavior, limiting the impact to a denial of service. Due to this reason, this vulnerability has been rated with an important severity.\n\nIn Grafana, JavaScript code runs only in the browser, while the server side is all Golang. Therefore, the worst-case scenario is a loss of functionality in the client application inside the browser. To reflect this, the CVSS availability metric and the severity of the Grafana and the Grafana-PCP component have been updated to low and moderate, respectively.\n\nThe lodash dependency is bundled and used by the pcs-web-ui component of the PCS package. In Red Hat Enterprise Linux 8.10, the pcs-web-ui component is no longer included in the PCS package. As a result, RHEL 8.10 does not ship the vulnerable lodash component within PCS and is therefore not-affected by this CVE.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-13465"
},
{
"category": "external",
"summary": "RHBZ#2431740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13465"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg",
"url": "https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg"
}
],
"release_date": "2026-01-21T19:05:28.846000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: prototype pollution in _.unset and _.omit functions"
},
{
"cve": "CVE-2025-15284",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-29T23:00:58.541337+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2425946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation (e.g., `a[]=value`). This bypasses the `arrayLimit` option, which is designed to limit the size of parsed arrays and prevent resource exhaustion. Successful exploitation can lead to memory exhaustion, causing a Denial of Service (DoS) where the application crashes or becomes unresponsive, making the service unavailable to users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper input validation in array parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the `qs` module for parsing query strings, particularly when processing user-controlled input with bracket notation. The `arrayLimit` option, intended to prevent resource exhaustion, is bypassed when bracket notation (`a[]=value`) is used, allowing a remote attacker to cause a denial of service through memory exhaustion. This can lead to application crashes or unresponsiveness, making the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-15284"
},
{
"category": "external",
"summary": "RHBZ#2425946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2425946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15284"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9",
"url": "https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"
}
],
"release_date": "2025-12-29T22:56:45.240000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper input validation in array parsing"
},
{
"cve": "CVE-2025-52881",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2025-10-17T14:19:18.652000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2404715"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in runc. This attack is a more sophisticated variant of CVE-2019-16884, which was a flaw that allowed an attacker to trick runc into writing the LSM process labels for a container process into a dummy tmpfs file and thus not apply the correct LSM labels to the container process. The mitigation applied for CVE-2019-16884 was fairly limited and effectively only caused runc to verify that when we write LSM labels that those labels are actual procfs files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat considers this as an Important flaw since the impact is limited to local attack with minimal privileges in order to jeopardize the environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-52881"
},
{
"category": "external",
"summary": "RHBZ#2404715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2404715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-52881",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52881"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52881"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm",
"url": "https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm"
},
{
"category": "external",
"summary": "https://github.com/opencontainers/selinux/pull/237",
"url": "https://github.com/opencontainers/selinux/pull/237"
}
],
"release_date": "2025-11-05T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Potential mitigations for this issue include:\n\n* Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective).\n* Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects"
},
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"cve": "CVE-2025-58754",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-09-12T02:00:53.897605+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2394735"
}
],
"notes": [
{
"category": "description",
"text": "A denial of service flaw has been discovered in the Axios npm package. When Axios runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http adapter decodes the entire payload into memory (`Buffer`/`Blob`) and returns a synthetic 200 response.\nThis path ignores `maxContentLength` / `maxBodyLength` (which only protect HTTP responses), so an attacker can supply a very large `data:` URI and cause the process to allocate unbounded memory and crash (DoS), even if the caller requested responseType: \u0027stream\u0027.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios DoS via lack of data size check",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Availability impact is limited to the application which bundles axios and not the host Red Hat system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58754"
},
{
"category": "external",
"summary": "RHBZ#2394735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58754",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58754"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58754"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593",
"url": "https://github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/7011",
"url": "https://github.com/axios/axios/pull/7011"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.12.0",
"url": "https://github.com/axios/axios/releases/tag/v1.12.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj"
}
],
"release_date": "2025-09-12T01:16:40.513000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios DoS via lack of data size check"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2025-66031",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2025-11-26T23:01:36.363253+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2417397"
}
],
"notes": [
{
"category": "description",
"text": "An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge asn1.fromDer function within forge/lib/asn1.js. The ASN.1 DER parser implementation (_fromDer) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw RangeError: Maximum call stack size exceeded, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: node-forge ASN.1 Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66031"
},
{
"category": "external",
"summary": "RHBZ#2417397",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417397"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66031",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66031"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451",
"url": "https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27"
}
],
"release_date": "2025-11-26T22:23:26.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "node-forge: node-forge ASN.1 Unbounded Recursion"
},
{
"cve": "CVE-2025-66418",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-12-05T17:01:20.277857+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3 Python library that could lead to a Denial of Service condition. A remote, malicious server can exploit this flaw by responding to a client request with an HTTP message that uses an excessive number of chained compression algorithms. This unlimited decompression chain causes the client system to consume a virtually unbounded amount of CPU resources and memory. The high resource usage leads to service disruption, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66418"
},
{
"category": "external",
"summary": "RHBZ#2419455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66418"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8",
"url": "https://github.com/urllib3/urllib3/commit/24d7b67eac89f94e11003424bcf0d8f7b72222a8"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53"
}
],
"release_date": "2025-12-05T16:02:15.271000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion"
},
{
"cve": "CVE-2025-66471",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2025-12-05T17:02:21.597728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419467"
}
],
"notes": [
{
"category": "description",
"text": "A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data; CWE-409) on the client side, even if the application only requested a small chunk of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 Streaming API improperly handles highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in urllib3\u0027s streaming API that can lead to excessive resource consumption, including high CPU usage and significant memory allocation. When processing highly compressed data from untrusted sources, even small requested chunks can trigger full decompression, posing a denial-of-service risk to client-side applications utilizing affected urllib3 versions prior to 2.6.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66471"
},
{
"category": "external",
"summary": "RHBZ#2419467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419467"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66471"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7",
"url": "https://github.com/urllib3/urllib3/commit/c19571de34c47de3a766541b041637ba5f716ed7"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37"
}
],
"release_date": "2025-12-05T16:06:08.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 Streaming API improperly handles highly compressed data"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2025-69223",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T20:01:19.831548+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427456"
}
],
"notes": [
{
"category": "description",
"text": "A decompression based denial of service flaw has been discovered in the AIOHTTP python library. Library versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by AIOHTTP could exhaust the host\u0027s memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69223"
},
{
"category": "external",
"summary": "RHBZ#2427456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69223",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69223"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a",
"url": "https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg"
}
],
"release_date": "2026-01-05T22:00:17.715000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP\u0027s HTTP Parser auto_decompress feature is vulnerable to zip bomb"
},
{
"cve": "CVE-2025-69227",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-01-06T00:01:17.036900+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via specially crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products as it can lead to a Denial of Service (DoS) in applications utilizing the `aiohttp` library. Exploitation requires Python optimizations to be explicitly enabled (e.g., via `-O` or `PYTHONOPTIMIZE=1`) and the application to process POST requests using the `Request.post()` method. Red Hat products are affected if they meet these specific configuration and usage criteria.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69227"
},
{
"category": "external",
"summary": "RHBZ#2427256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69227",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69227"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69227"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259",
"url": "https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23"
}
],
"release_date": "2026-01-05T23:19:31.396000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via specially crafted POST request"
},
{
"cve": "CVE-2025-69228",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-06T00:01:02.119065+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aiohttp. A remote attacker can craft a malicious request that, when processed by an aiohttp server using the `Request.post()` method, causes the server\u0027s memory to fill uncontrollably. This can lead to a Denial of Service (DoS) by freezing the server, making it unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. A flaw in aiohttp allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted POST request to an aiohttp server that utilizes the `Request.post()` method. This can lead to uncontrolled memory consumption, freezing the server and making the server unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-69228"
},
{
"category": "external",
"summary": "RHBZ#2427254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-69228",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69228"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-69228"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60",
"url": "https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf"
}
],
"release_date": "2026-01-05T23:30:33.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-21441",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-01-07T23:01:59.422078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2427726"
}
],
"notes": [
{
"category": "description",
"text": "urllib3 is an HTTP client library for Python. urllib3\u0027s streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-21441"
},
{
"category": "external",
"summary": "RHBZ#2427726",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427726"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21441"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b",
"url": "https://github.com/urllib3/urllib3/commit/8864ac407bba8607950025e0979c4c69bc7abc7b"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99"
}
],
"release_date": "2026-01-07T22:09:01.936000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)"
},
{
"cve": "CVE-2026-22029",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-01-10T04:01:03.694749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2428412"
}
],
"notes": [
{
"category": "description",
"text": "A cross site scripting flaw has been discovered in the npm react-router and @remix-run/router packages. React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs causing unintended javascript execution on the client. This is only an issue if you are creating redirect paths from untrusted content or via an open redirect.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22029"
},
{
"category": "external",
"summary": "RHBZ#2428412",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428412"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22029"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx"
}
],
"release_date": "2026-01-10T02:42:32.736000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects"
},
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-23745",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-16T23:01:26.508727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430538"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the node-tar library. This vulnerability allows an attacker to craft malicious archives that, when extracted, can bypass intended security restrictions. This leads to arbitrary file overwrite and symlink poisoning, potentially allowing unauthorized modification of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products that utilize the node-tar library. The flaw allows an attacker to perform arbitrary file overwrite and symlink poisoning by crafting malicious tar archives. This occurs due to insufficient path sanitization of hardlink and symbolic link entries, even when the default secure behavior (preservePaths is false) is enabled.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23745"
},
{
"category": "external",
"summary": "RHBZ#2430538",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430538"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23745",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23745"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23745"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e",
"url": "https://github.com/isaacs/node-tar/commit/340eb285b6d986e91969a1170d7fe9b0face405e"
},
{
"category": "external",
"summary": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97",
"url": "https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97"
}
],
"release_date": "2026-01-16T22:00:08.769000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42338",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-12T21:01:14.436876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2476810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ip-address, a JavaScript library for parsing and manipulating IPv4 and IPv6 addresses. This vulnerability allows a remote attacker to perform cross-site scripting (XSS) by providing untrusted input to the Address6 constructor. When an application renders the output of Address6.group(), Address6.link(), or the AddressError.parseMessage as HTML without proper escaping, the attacker-controlled content can be executed in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in the `ip-address` JavaScript library is rated as Important. It allows for cross-site scripting (XSS) when an application processes untrusted input through the `Address6` constructor and subsequently renders the unescaped output of methods like `Address6.group()`, `Address6.link()`, or `AddressError.parseMessage` directly as HTML. While the library itself is affected, exploitation is contingent on specific application-level rendering practices that may not be common in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "RHBZ#2476810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2476810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42338",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42338"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42338"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g"
}
],
"release_date": "2026-05-12T19:43:16.470000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"known_not_affected": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T08:34:29+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-controller-rhel8@sha256:c6c8c0043464e89cd453e08d1810f64f51beb257cdea7308bb834514458b07a1_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8@sha256:02f5217127da7511e0aa18a6d52d10ae86bc66b287f0b83dc1bf0a6c948c863e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8@sha256:a95fb37066dc978d832658ff4def1d29408f469eabbd2c7ba7e34e88bed5428b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-must-gather-rhel8@sha256:7e84a4b81285364f379afded01aacebf113fdf0a5d154088296033e4062fbc87_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-openvpn-rhel8@sha256:f7f8bec788184fbc9a6b84c89504852cf810e8ec144304b8327b767264f98b9e_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-operator-bundle@sha256:7d8b6ed009b45cad2daa897297ffeb699b8e11fac6412e98b1a97764bc860457_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-registry-rhel8@sha256:69d94b57a736435294f846b5c2839f352feb3e8dbb53f338f79d9e34e94a3790_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rhel8-operator@sha256:351a1219dbe7c1f9bdcb7bf0101b5b15078dc866e2305088fc98f7c3e0ddc6b9_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-rsync-transfer-rhel8@sha256:5bfb5e1680c51728f3d1a96bff1f7bdd9ab58e157cd0a7354101fe64d04776be_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-ui-rhel8@sha256:d2cd392eee3d359b4c26e0c02ca32196e4e7c40960a2c3c1963d24062554af4b_amd64",
"Red Hat Migration Toolkit 1.8:registry.redhat.io/rhmtc/openshift-migration-velero-plugin-for-mtc-rhel8@sha256:ee6afe71596ef9a549fdd91921351a85064cb89d7745a9f8a1633c2bc776fcbd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
}
]
}
RHSA-2026:41951
Vulnerability from csaf_redhat - Published: 2026-07-20 11:56 - Updated: 2026-07-31 16:40Summary
Red Hat Security Advisory: Red Hat Data Grid 8.6.2 security update
Severity
Important
Notes
Topic: An update for Red Hat Data Grid 8 is now available.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale.
Data Grid 8.6.2 replaces Data Grid 8.6.1 and includes bug fixes and enhancements. Find out more about Data Grid 8.6.2 in the Release Notes[3].
Security Fix(es):
* CVE-2026-54513 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution [jdg-8.6] (CVE-2026-54513)
* CVE-2026-42211 react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode [jdg-8.6] (CVE-2026-42211)
* CVE-2026-42264 axios: Axios: Prototype pollution allows information disclosure and request manipulation [jdg-8.6] (CVE-2026-42264)
* CVE-2026-50193 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing [jdg-8.6] (CVE-2026-50193)
* CVE-2026-54512 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass [jdg-8.6] (CVE-2026-54512)
* CVE-2026-40983 micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests [jdg-8.6] (CVE-2026-40983)
* CVE-2026-40984 micrometer-core: Micrometer: Denial of Service via specially crafted HTTP requests [jdg-8.6] (CVE-2026-40984)
* CVE-2026-12143 form-data: form-data: Form field override via CRLF injection [jdg-8.6] (CVE-2026-12143)
* CVE-2026-9595 webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration [jdg-8.6] (CVE-2026-9595)
* CVE-2026-50011 netty-codec-redis: Netty: Denial of Service via malicious Redis array header [jdg-8.6] (CVE-2026-50011)
* CVE-2026-45416 netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake [jdg-8.6] (CVE-2026-45416)
* CVE-2026-44890 netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads [jdg-8.6] (CVE-2026-44890)
* CVE-2026-44250 netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays [jdg-8.6] (CVE-2026-44250)
* CVE-2026-46340 netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments [jdg-8.6] (CVE-2026-46340)
* CVE-2026-45674 netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation [jdg-8.6] (CVE-2026-45674)
* CVE-2026-50010 netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass [jdg-8.6] (CVE-2026-50010)
* CVE-2026-48006 netty-codec-redis: Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator [jdg-8.6] (CVE-2026-48006)
* CVE-2026-47691 netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records [jdg-8.6] (CVE-2026-47691)
* CVE-2026-48059 netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers [jdg-8.6] (CVE-2026-48059)
* CVE-2026-48043 netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak [jdg-8.6] (CVE-2026-48043)
* CVE-2026-44893 netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message [jdg-8.6] (CVE-2026-44893)
* CVE-2026-44249 netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation [jdg-8.6] (CVE-2026-44249)
* CVE-2026-44492 axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization [jdg-8.6] (CVE-2026-44492)
* CVE-2026-44494 axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution [jdg-8.6] (CVE-2026-44494)
* CVE-2026-44496 axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name [jdg-8.6] (CVE-2026-44496)
* CVE-2026-44486 axios: Axios: Information disclosure of proxy credentials via HTTP redirects [jdg-8.6] (CVE-2026-44486)
* CVE-2026-44487 axios: Axios: Information disclosure of proxy credentials via redirect flows [jdg-8.6] (CVE-2026-44487)
* CVE-2026-44488 axios: Axios: Denial of Service due to unenforced request and response size limits [jdg-8.6] (CVE-2026-44488)
* CVE-2026-44495 axios: Axios: Information disclosure due to prototype pollution vulnerability [jdg-8.6] (CVE-2026-44495)
* CVE-2026-6322 fast-uri: fast-uri: URI authority bypass due to improper delimiter handling [jdg-8.6] (CVE-2026-6322)
* CVE-2026-45292 opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage [jdg-8.6] (CVE-2026-45292)
* CVE-2026-42583 netty-codec-compression: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder [jdg-8.6] (CVE-2026-42583)
* CVE-2026-44248 netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header [jdg-8.6] (CVE-2026-44248)
* CVE-2026-42587 netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression [jdg-8.6] (CVE-2026-42587)
* CVE-2026-42586 netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder [jdg-8.6] (CVE-2026-42586)
* CVE-2026-42342 react-router: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint [jdg-8.6] (CVE-2026-42342)
* CVE-2026-33245 react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects [jdg-8.6] (CVE-2026-33245)
* CVE-2026-34077 react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling [jdg-8.6] (CVE-2026-34077)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as '/', and enables WebSocket (ws: true) forwarding, the development server's own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser's cookies and Origin header to the proxy target, bypassing the server's Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in React Router. This vulnerability, a type of Cross-Site Scripting (XSS), affects applications utilizing React Router's unstable React Server Components (RSC) APIs. A remote attacker could exploit this by sending untrusted redirects, leading to the execution of malicious scripts in the client's browser. This could result in information disclosure or unauthorized actions.
4.2 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in React Router (versions 7.7.0 through 7.13.1). When using the unstable React Server Components (RSC) APIs, insufficient sanitization of redirect targets allows client-side cross-site scripting if redirects originate from untrusted sources. An attacker could inject script that disrupts application availability for the victim user. Applications not using the unstable RSC APIs are not affected. Fixed in React Router 7.13.2.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution (RCE) on the server through a two-step attack involving external requests. This vulnerability poses a significant risk, potentially allowing an attacker to take control of the affected system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in React Router and @remix-run/server-runtime. A remote attacker can exploit this vulnerability by sending certain crafted requests to the __manifest endpoint. This can lead to unbounded path expansion, consuming disproportionate server resources. The primary consequence is a denial of service (DoS), resulting in response time degradation and service unavailability for end users.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory (up to 32 MB per block) before the LZ4 decompression runs, leading to excessive memory consumption and a denial of service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, an asynchronous, event-driven network application framework. The Netty Redis codec encoder (RedisEncoder) does not properly validate or sanitize user-controlled string content for CRLF (Carriage Return Line Feed) characters. A remote attacker, by controlling the content of a Redis message, can inject arbitrary Redis commands or forge fake responses. This can lead to a high impact on data integrity.
6.8 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory before any message size limits are applied, leading to high CPU and memory consumption. This can result in a Denial of Service (DoS) condition, making the affected system unavailable.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending a specially crafted Redis payload containing deeply nested arrays. This action forces the server to allocate a large number of state objects and collections, leading to memory exhaustion. Consequently, this can result in a Denial of Service (DoS) condition, rendering the affected server unresponsive.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server's direct memory pool, leading to a Denial of Service (DoS) condition where legitimate connections cannot be processed.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-transport-sctp. A remote attacker can exploit this vulnerability by sending specially crafted, non-complete Stream Control Transmission Protocol (SCTP) message fragments. This can lead to unbounded memory growth within the application, causing a Denial of Service (DoS) condition. The affected component fails to limit the size or number of these fragments, allowing an attacker to consume excessive system resources.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the shared memory pool. Over time, this can exhaust the available memory, causing a Denial of Service (DoS) for all Netty channels in the process.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. The RedisArrayAggregator component pre-allocates memory based on the declared element count in a Redis array header. A remote attacker can exploit this by sending a small, malicious Redis array header that claims a huge initial capacity, leading to excessive memory pre-allocation. This can result in a denial of service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat Data Grid 8.6.2
Red Hat / Red Hat JBoss Data Grid
|
cpe:/a:redhat:jboss_data_grid:8
|
— |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
258 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Data Grid 8 is now available.\n \nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale.\n \nData Grid 8.6.2 replaces Data Grid 8.6.1 and includes bug fixes and enhancements. Find out more about Data Grid 8.6.2 in the Release Notes[3].\n\nSecurity Fix(es):\n\n* CVE-2026-54513 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution [jdg-8.6] (CVE-2026-54513)\n\n* CVE-2026-42211 react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode [jdg-8.6] (CVE-2026-42211)\n\n* CVE-2026-42264 axios: Axios: Prototype pollution allows information disclosure and request manipulation [jdg-8.6] (CVE-2026-42264)\n\n* CVE-2026-50193 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing [jdg-8.6] (CVE-2026-50193)\n\n* CVE-2026-54512 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass [jdg-8.6] (CVE-2026-54512)\n\n* CVE-2026-40983 micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests [jdg-8.6] (CVE-2026-40983)\n\n* CVE-2026-40984 micrometer-core: Micrometer: Denial of Service via specially crafted HTTP requests [jdg-8.6] (CVE-2026-40984)\n\n* CVE-2026-12143 form-data: form-data: Form field override via CRLF injection [jdg-8.6] (CVE-2026-12143)\n\n* CVE-2026-9595 webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration [jdg-8.6] (CVE-2026-9595)\n\n* CVE-2026-50011 netty-codec-redis: Netty: Denial of Service via malicious Redis array header [jdg-8.6] (CVE-2026-50011)\n\n* CVE-2026-45416 netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake [jdg-8.6] (CVE-2026-45416)\n\n* CVE-2026-44890 netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads [jdg-8.6] (CVE-2026-44890)\n\n* CVE-2026-44250 netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays [jdg-8.6] (CVE-2026-44250)\n\n* CVE-2026-46340 netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments [jdg-8.6] (CVE-2026-46340)\n\n* CVE-2026-45674 netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation [jdg-8.6] (CVE-2026-45674)\n\n* CVE-2026-50010 netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass [jdg-8.6] (CVE-2026-50010)\n\n* CVE-2026-48006 netty-codec-redis: Netty\u0027s Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator [jdg-8.6] (CVE-2026-48006)\n\n* CVE-2026-47691 netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records [jdg-8.6] (CVE-2026-47691)\n\n* CVE-2026-48059 netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers [jdg-8.6] (CVE-2026-48059)\n* CVE-2026-48043 netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak [jdg-8.6] (CVE-2026-48043)\n\n* CVE-2026-44893 netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message [jdg-8.6] (CVE-2026-44893)\n\n* CVE-2026-44249 netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation [jdg-8.6] (CVE-2026-44249)\n\n* CVE-2026-44492 axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization [jdg-8.6] (CVE-2026-44492)\n\n* CVE-2026-44494 axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution [jdg-8.6] (CVE-2026-44494)\n\n* CVE-2026-44496 axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name [jdg-8.6] (CVE-2026-44496)\n\n* CVE-2026-44486 axios: Axios: Information disclosure of proxy credentials via HTTP redirects [jdg-8.6] (CVE-2026-44486)\n\n* CVE-2026-44487 axios: Axios: Information disclosure of proxy credentials via redirect flows [jdg-8.6] (CVE-2026-44487)\n\n* CVE-2026-44488 axios: Axios: Denial of Service due to unenforced request and response size limits [jdg-8.6] (CVE-2026-44488)\n\n* CVE-2026-44495 axios: Axios: Information disclosure due to prototype pollution vulnerability [jdg-8.6] (CVE-2026-44495)\n\n* CVE-2026-6322 fast-uri: fast-uri: URI authority bypass due to improper delimiter handling [jdg-8.6] (CVE-2026-6322)\n\n* CVE-2026-45292 opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage [jdg-8.6] (CVE-2026-45292)\n\n* CVE-2026-42583 netty-codec-compression: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder [jdg-8.6] (CVE-2026-42583)\n\n* CVE-2026-44248 netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header [jdg-8.6] (CVE-2026-44248)\n\n* CVE-2026-42587 netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression [jdg-8.6] (CVE-2026-42587)\n\n* CVE-2026-42586 netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder [jdg-8.6] (CVE-2026-42586)\n\n* CVE-2026-42342 react-router: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint [jdg-8.6] (CVE-2026-42342)\n\n* CVE-2026-33245 react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects [jdg-8.6] (CVE-2026-33245)\n\n* CVE-2026-34077 react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling [jdg-8.6] (CVE-2026-34077)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:41951",
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "2477213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477213"
},
{
"category": "external",
"summary": "2477219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477219"
},
{
"category": "external",
"summary": "2477220",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220"
},
{
"category": "external",
"summary": "2477231",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477231"
},
{
"category": "external",
"summary": "2482785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482785"
},
{
"category": "external",
"summary": "2484115",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484115"
},
{
"category": "external",
"summary": "2484116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484116"
},
{
"category": "external",
"summary": "2484123",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484123"
},
{
"category": "external",
"summary": "2484124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484124"
},
{
"category": "external",
"summary": "2486697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486697"
},
{
"category": "external",
"summary": "2486716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486716"
},
{
"category": "external",
"summary": "2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "2488053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488053"
},
{
"category": "external",
"summary": "2488062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488062"
},
{
"category": "external",
"summary": "2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "2488388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488388"
},
{
"category": "external",
"summary": "2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "2488413",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488413"
},
{
"category": "external",
"summary": "2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "2488433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488433"
},
{
"category": "external",
"summary": "2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "2491999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491999"
},
{
"category": "external",
"summary": "2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41951.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Data Grid 8.6.2 security update",
"tracking": {
"current_release_date": "2026-07-31T16:40:27+00:00",
"generator": {
"date": "2026-07-31T16:40:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:41951",
"initial_release_date": "2026-07-20T11:56:31+00:00",
"revision_history": [
{
"date": "2026-07-20T11:56:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T11:56:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T16:40:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Data Grid 8.6.2",
"product": {
"name": "Red Hat Data Grid 8.6.2",
"product_id": "Red Hat Data Grid 8.6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_data_grid:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Data Grid"
}
],
"category": "vendor",
"name": "Red Hat"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"cve": "CVE-2026-9595",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-15T16:01:15.427658+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488934"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webpack-dev-server. When a user configures a proxy with a broad context, such as \u0027/\u0027, and enables WebSocket (ws: true) forwarding, the development server\u0027s own Hot Module Replacement (HMR) WebSocket can be intercepted. This interception leads to the leakage of the browser\u0027s cookies and Origin header to the proxy target, bypassing the server\u0027s Host/Origin validation. Additionally, it can corrupt the HMR socket, resulting in a denial of service for the HMR functionality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9595"
},
{
"category": "external",
"summary": "RHBZ#2488934",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488934"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9595"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/facebook/create-react-app/pull/7444",
"url": "https://github.com/facebook/create-react-app/pull/7444"
},
{
"category": "external",
"summary": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb",
"url": "https://github.com/vuejs/vue-cli/commit/72ba7505aff2a8314e82aa5082379a77504a1fcb"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/pull/4316",
"url": "https://github.com/webpack/webpack-dev-server/pull/4316"
},
{
"category": "external",
"summary": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79",
"url": "https://github.com/webpack/webpack-dev-server/security/advisories/GHSA-mx8g-39q3-5c79"
}
],
"release_date": "2026-06-15T15:00:21.488000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid configuring `webpack-dev-server` with a broad proxy context (e.g., `/`) when WebSocket forwarding (`ws: true`) is enabled. Instead, define specific paths for the proxy context. Alternatively, disable WebSocket forwarding by omitting `ws: true` from the proxy entry if WebSocket functionality is not required for the proxy target. This configuration change may require restarting the `webpack-dev-server` instance to take effect.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webpack-dev-server: webpack-dev-server: Information disclosure and denial of service via improper proxy configuration"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-33245",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-02T20:02:35.251282+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484124"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in React Router. This vulnerability, a type of Cross-Site Scripting (XSS), affects applications utilizing React Router\u0027s unstable React Server Components (RSC) APIs. A remote attacker could exploit this by sending untrusted redirects, leading to the execution of malicious scripts in the client\u0027s browser. This could result in information disclosure or unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33245"
},
{
"category": "external",
"summary": "RHBZ#2484124",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484124"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33245",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33245"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33245",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33245"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62"
}
],
"release_date": "2026-06-02T17:14:50.377000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this Cross-Site Scripting (XSS) vulnerability, ensure that applications utilizing React Router\u0027s unstable React Server Components (RSC) APIs only process redirects from trusted sources. Avoiding the use of these unstable APIs in production environments where untrusted redirect sources cannot be guaranteed is also recommended.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects"
},
{
"cve": "CVE-2026-34077",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-02T20:02:32.570368+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484123"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in React Router (versions 7.7.0 through 7.13.1). When using the unstable React Server Components (RSC) APIs, insufficient sanitization of redirect targets allows client-side cross-site scripting if redirects originate from untrusted sources. An attacker could inject script that disrupts application availability for the victim user. Applications not using the unstable RSC APIs are not affected. Fixed in React Router 7.13.2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "React Router is vulnerable to client-side XSS in unstable RSC redirect handling when redirects come from untrusted sources. A remote unauthenticated attacker who can cause a victim to follow a crafted redirect (user interaction required) may execute script in the browser context, leading to denial of service. Only affects deployments using unstable RSC APIs (versions 7.7.0\u20137.13.1); patched in 7.13.2. Affects npm react-router bundles across OpenShift console plugins, AAP, GitOps, RHACM, and other hybrid products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34077"
},
{
"category": "external",
"summary": "RHBZ#2484123",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484123"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34077",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34077"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34077",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34077"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-rxv8-25v2-qmq8",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-rxv8-25v2-qmq8"
}
],
"release_date": "2026-06-02T17:31:35.579000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "react-router: React Router: Denial of Service via client-side Cross-Site Scripting in RSC redirect handling"
},
{
"cve": "CVE-2026-40983",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T05:00:52.290020+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486697"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC (gRPC Remote Procedure Call) requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service vulnerability in Micrometer, as a remote unauthenticated attacker can disrupt the availability of affected systems by sending specially crafted gRPC requests. The broad accessibility of gRPC endpoints in typical deployments contributes to the elevated risk, allowing for significant service interruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40983"
},
{
"category": "external",
"summary": "RHBZ#2486697",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486697"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40983"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40983"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-40983",
"url": "https://spring.io/security/cve-2026-40983"
}
],
"release_date": "2026-06-09T03:46:54.131000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services exposing Micrometer\u0027s gRPC endpoints to trusted clients only. Implement firewall rules to limit inbound connections to the specific ports used by gRPC. If gRPC functionality is not essential for the deployment, consider disabling it entirely to eliminate the attack vector. Any changes to network configurations or service settings may require a service restart to take effect, potentially impacting availability during the transition.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests"
},
{
"cve": "CVE-2026-40984",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-09T05:01:51.700197+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486716"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Micrometer. A remote attacker can provide specially crafted HTTP requests, which may lead to a denial-of-service (DoS) condition. This vulnerability allows an attacker to disrupt the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service vulnerability in Micrometer, a component present in several Red Hat products. A remote, unauthenticated attacker can exploit this flaw by sending specially crafted HTTP requests, leading to resource exhaustion and disrupting the availability of affected services. Exploitation of this flaw requires one or more HTTP server instrumentation(s), from one of the vulnerable components, to be configured to record metrics.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40984"
},
{
"category": "external",
"summary": "RHBZ#2486716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486716"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40984"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40984"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-40984",
"url": "https://spring.io/security/cve-2026-40984"
}
],
"release_date": "2026-06-09T03:47:46.447000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests"
},
{
"cve": "CVE-2026-42211",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-02T20:02:06.557013+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484115"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution (RCE) on the server through a two-step attack involving external requests. This vulnerability poses a significant risk, potentially allowing an attacker to take control of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important remote code execution flaw exists in React Router versions 7.0.0 through 7.14.1 when utilized in Framework Mode. This vulnerability requires an existing prototype pollution flaw within the application to enable a two-step attack, leading to unauthorized remote code execution on the server. Red Hat products employing React Router in Declarative Mode or Data Mode are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42211"
},
{
"category": "external",
"summary": "RHBZ#2484115",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484115"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42211"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h"
}
],
"release_date": "2026-06-02T18:18:46.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that applications using React Router are not configured in Framework Mode. Instead, utilize Declarative Mode (`\u003cBrowserRouter\u003e`) or Data Mode (`createBrowserRouter/\u003cRouterProvider\u003e`), as these modes are not susceptible to this flaw.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42342",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-02T20:02:09.305521+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484116"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in React Router and @remix-run/server-runtime. A remote attacker can exploit this vulnerability by sending certain crafted requests to the __manifest endpoint. This can lead to unbounded path expansion, consuming disproportionate server resources. The primary consequence is a denial of service (DoS), resulting in response time degradation and service unavailability for end users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in React Router (Framework Mode) and Remix (@remix-run/server-runtime). Crafted requests to the __manifest endpoint can trigger unbounded path expansion, consuming disproportionate server resources and causing denial of service through response time degradation or complete service unavailability. This only affects applications using React Router Framework Mode or Remix server runtime; applications using Declarative Mode (BrowserRouter) or Data Mode (createBrowserRouter/RouterProvider) are not impacted. In Red Hat products, affected React Router components are used in internal console UIs that are deployed behind authenticated ingress, reducing the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42342"
},
{
"category": "external",
"summary": "RHBZ#2484116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484116"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42342"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42342",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42342"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78"
}
],
"release_date": "2026-06-02T18:23:02.765000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\nUpgrade to a patched version to fully mitigate the issues (ref: https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78).",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint"
},
{
"cve": "CVE-2026-42583",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:32.498598+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477219"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted LZ4 compressed data stream. This can cause the Lz4FrameDecoder to allocate a large amount of memory (up to 32 MB per block) before the LZ4 decompression runs, leading to excessive memory consumption and a denial of service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Netty\u0027s LZ4FrameDecoder. The decoder allocates a buffer based on the decompressed length from the LZ4 frame header (up to 32 MB per block) before decompression runs. A remote attacker can send a small crafted LZ4 header (as few as 22 bytes) to force excessive memory allocation, leading to a denial of service. Red Hat products that use Netty with LZ4 compression enabled are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42583"
},
{
"category": "external",
"summary": "RHBZ#2477219",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477219"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42583",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42583"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6",
"url": "https://github.com/netty/netty/security/advisories/GHSA-mj4r-2hfc-f8p6"
}
],
"release_date": "2026-05-13T18:09:19.817000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder"
},
{
"cve": "CVE-2026-42586",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-05-13T19:01:07.234596+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477213"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous, event-driven network application framework. The Netty Redis codec encoder (RedisEncoder) does not properly validate or sanitize user-controlled string content for CRLF (Carriage Return Line Feed) characters. A remote attacker, by controlling the content of a Redis message, can inject arbitrary Redis commands or forge fake responses. This can lead to a high impact on data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42586"
},
{
"category": "external",
"summary": "RHBZ#2477213",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477213"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42586",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42586"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42586",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42586"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7",
"url": "https://github.com/netty/netty/security/advisories/GHSA-rgrr-p7gp-5xj7"
}
],
"release_date": "2026-05-13T18:20:46.999000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "netty-codec-redis: Netty: Command injection via CRLF characters in Redis codec encoder"
},
{
"cve": "CVE-2026-42587",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:01:35.415881+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477220"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker can bypass the configured decompression limit in the HttpContentDecompressor by sending a specially crafted compressed payload using Brotli (br), Zstandard (zstd), or Snappy content encodings. This can lead to unbounded memory allocation, resulting in an out-of-memory Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s HTTP content decompression. A remote attacker can exploit this flaw by sending specially crafted compressed payloads using Brotli, Zstandard, or Snappy encodings, bypassing configured decompression limits. This leads to unbounded memory allocation, potentially causing an out-of-memory condition and rendering affected Red Hat systems unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42587"
},
{
"category": "external",
"summary": "RHBZ#2477220",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477220"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42587"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv"
}
],
"release_date": "2026-05-13T18:22:21.699000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression"
},
{
"cve": "CVE-2026-44248",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-13T19:02:22.095946+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477231"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, an asynchronous event-driven network application framework. A remote attacker can exploit this vulnerability by sending a crafted MQTT 5 header with an oversized Properties section. This causes Netty to repeatedly parse and buffer the large Properties section in memory before any message size limits are applied, leading to high CPU and memory consumption. This can result in a Denial of Service (DoS) condition, making the affected system unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44248"
},
{
"category": "external",
"summary": "RHBZ#2477231",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477231"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44248",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44248"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44248",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44248"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx",
"url": "https://github.com/netty/netty/security/advisories/GHSA-jfg9-48mv-9qgx"
}
],
"release_date": "2026-05-13T18:23:37.563000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: io.netty/netty-codec-mqtt: Netty: Denial of Service due to excessive resource consumption from crafted MQTT 5 header"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-44250",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T22:01:16.373607+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488062"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending a specially crafted Redis payload containing deeply nested arrays. This action forces the server to allocate a large number of state objects and collections, leading to memory exhaustion. Consequently, this can result in a Denial of Service (DoS) condition, rendering the affected server unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in netty-codec-redis, affecting Red Hat products that process Redis payloads. A remote attacker can exhaust server memory by sending a crafted Redis payload with deeply nested arrays, leading to an OutOfMemoryError and rendering the service unresponsive. This impact is significant due to the potential for complete service disruption without authentication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44250"
},
{
"category": "external",
"summary": "RHBZ#2488062",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488062"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44250",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44250"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44250",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44250"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3244-j874-rhc2"
}
],
"release_date": "2026-06-11T20:49:00.487000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services utilizing netty-codec-redis to trusted clients and networks only. Implement firewall rules to limit exposure of the Redis service or the application using it to prevent unauthenticated remote attackers from sending malicious payloads. This may impact legitimate client connections if not configured carefully. A service restart may be required for firewall rule changes to take effect.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payload with deeply nested arrays"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44890",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T22:00:53.322242+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488053"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by sending specially crafted Redis payloads across multiple connections without proper termination. This can exhaust the server\u0027s direct memory pool, leading to a Denial of Service (DoS) condition where legitimate connections cannot be processed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important as it allows a remote, unauthenticated attacker to cause a denial of service in applications utilizing `netty-codec-redis` or `netty-handler`. By sending specially crafted Redis payloads without proper termination, an attacker can exhaust the server\u0027s direct memory pool, preventing legitimate connections and disrupting service availability. This impacts Red Hat products that process Redis traffic via affected Netty components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44890"
},
{
"category": "external",
"summary": "RHBZ#2488053",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488053"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44890"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3",
"url": "https://github.com/netty/netty/security/advisories/GHSA-6ghj-frrj-jjj3"
}
],
"release_date": "2026-06-11T20:52:50.980000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-redis: netty-codec-redis: Denial of Service via crafted Redis payloads"
},
{
"cve": "CVE-2026-44893",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-06-12T15:01:18.066312+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "RHBZ#2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv"
}
],
"release_date": "2026-06-12T14:00:25.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message"
},
{
"cve": "CVE-2026-45292",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-28T17:02:14.674828+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482785"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry Java, specifically within the baggage propagation implementation of opentelemetry-api and opentelemetry-extension-trace-propagators. A remote attacker can exploit this vulnerability by sending oversized baggage, which leads to unbounded memory allocation and high CPU consumption. This can result in a Denial of Service (DoS) for the affected service. Furthermore, because baggage is automatically re-injected into outgoing requests, the impact can spread to other downstream services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry Java\u0027s baggage propagation, affecting Red Hat products that use OpenTelemetry for telemetry. A remote attacker can exploit this by sending excessively large baggage, leading to uncontrolled memory and CPU usage. The vulnerability\u0027s impact can extend to downstream services due to automatic re-injection of baggage into outgoing requests.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45292"
},
{
"category": "external",
"summary": "RHBZ#2482785",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482785"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45292"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f",
"url": "https://github.com/open-telemetry/opentelemetry-java/commit/03837d3c1763bc35464aea1078671e2ef2336a5f"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/pull/8380",
"url": "https://github.com/open-telemetry/opentelemetry-java/pull/8380"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0",
"url": "https://github.com/open-telemetry/opentelemetry-java/releases/tag/v1.62.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx",
"url": "https://github.com/open-telemetry/opentelemetry-java/security/advisories/GHSA-rcgg-9c38-7xpx"
}
],
"release_date": "2026-05-28T16:37:29.490000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-46340",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:34.090215+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488388"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-transport-sctp. A remote attacker can exploit this vulnerability by sending specially crafted, non-complete Stream Control Transmission Protocol (SCTP) message fragments. This can lead to unbounded memory growth within the application, causing a Denial of Service (DoS) condition. The affected component fails to limit the size or number of these fragments, allowing an attacker to consume excessive system resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw exists in `netty-transport-sctp`, a component used across various Red Hat products. A remote, unauthenticated attacker can exploit this vulnerability by sending fragmented Stream Control Transmission Protocol (SCTP) messages without the completion flag. This leads to unbounded memory growth and resource exhaustion, causing a complete denial of service for applications utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46340"
},
{
"category": "external",
"summary": "RHBZ#2488388",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488388"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46340",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46340"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46340",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46340"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5xrh-qmmq-w6ch"
}
],
"release_date": "2026-06-12T14:19:48.855000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-48006",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:27.195680+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-redis. A remote attacker can exploit this vulnerability by repeatedly closing Redis pipeline connections before a Redis array aggregate completes. This leads to a permanent leak of direct-memory buffers, which prevents memory chunks from being returned to the shared memory pool. Over time, this can exhaust the available memory, causing a Denial of Service (DoS) for all Netty channels in the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-redis: Netty\u0027s Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s RedisArrayAggregator. Repeated connection churn by a network peer can lead to a permanent leak of direct-memory buffers, eventually exhausting the JVM-wide direct-memory pool. This can cause allocation failures across all Netty channels, impacting the availability and stability of Red Hat products utilizing Netty for Redis communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48006"
},
{
"category": "external",
"summary": "RHBZ#2488433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48006"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48006",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48006"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm",
"url": "https://github.com/netty/netty/security/advisories/GHSA-6jv9-x5w9-2ccm"
}
],
"release_date": "2026-06-12T14:36:44.416000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-redis: Netty\u0027s Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator"
},
{
"cve": "CVE-2026-48043",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:56.371830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "RHBZ#2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j"
}
],
"release_date": "2026-06-12T14:39:52.498000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak"
},
{
"cve": "CVE-2026-48059",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-06-12T16:02:40.032749+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "RHBZ#2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j"
}
],
"release_date": "2026-06-12T14:42:44.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers"
},
{
"cve": "CVE-2026-50010",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-06-12T16:02:13.735675+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "RHBZ#2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9"
}
],
"release_date": "2026-06-12T14:50:43.151000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
},
{
"cve": "CVE-2026-50011",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T16:01:17.003045+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488413"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. The RedisArrayAggregator component pre-allocates memory based on the declared element count in a Redis array header. A remote attacker can exploit this by sending a small, malicious Redis array header that claims a huge initial capacity, leading to excessive memory pre-allocation. This can result in a denial of service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-redis: Netty: Denial of Service via malicious Redis array header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Netty\u0027s RedisArrayAggregator component. A remote, unauthenticated attacker can exploit this flaw by sending a specially crafted Redis array header, causing excessive memory pre-allocation and leading to resource exhaustion. This can disrupt services utilizing Netty for Redis communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50011"
},
{
"category": "external",
"summary": "RHBZ#2488413",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488413"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50011"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5w86-c3rq-vjj7"
}
],
"release_date": "2026-06-12T14:52:18.042000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that utilize the netty-codec-redis component and process Redis traffic. Configure firewalls or network access control lists (ACLs) to limit connections to these services from trusted networks or localhost only. This reduces the attack surface by preventing untrusted remote attackers from sending malicious Redis array headers. Consult product-specific documentation for detailed instructions on configuring network access for affected Red Hat products. Reloading or restarting services may be required for network configuration changes to take effect, which could temporarily impact availability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-redis: Netty: Denial of Service via malicious Redis array header"
},
{
"cve": "CVE-2026-50193",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-23T22:01:01.154533+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491999"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON (JavaScript Object Notation) data to a service that reads and processes it. This can lead to a Denial of Service (DoS) by consuming significant system resources, making the service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service flaw in jackson-databind, affecting services that process deeply nested JSON data. Exploitation occurs when a service reads JSON as `JsonNode` and subsequently writes it back using `JsonNode.toString()`, leading to excessive resource consumption and potential service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50193"
},
{
"category": "external",
"summary": "RHBZ#2491999",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491999"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50193",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50193"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50193"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c",
"url": "https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/3447",
"url": "https://github.com/FasterXML/jackson-databind/issues/3447"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh"
}
],
"release_date": "2026-06-23T21:00:20.444000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-54513",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-23T22:01:34.437620+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492010"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Data Grid 8.6.2"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "RHBZ#2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5",
"url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e",
"url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5981",
"url": "https://github.com/FasterXML/jackson-databind/issues/5981"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5983",
"url": "https://github.com/FasterXML/jackson-databind/issues/5983"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5984",
"url": "https://github.com/FasterXML/jackson-databind/pull/5984"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f"
}
],
"release_date": "2026-06-23T20:53:52.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T11:56:31+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Data Grid 8.6.2"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:41951"
},
{
"category": "workaround",
"details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application\u2019s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.",
"product_ids": [
"Red Hat Data Grid 8.6.2"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Data Grid 8.6.2"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
}
]
}
RHSA-2026:42078
Vulnerability from csaf_redhat - Published: 2026-07-20 16:12 - Updated: 2026-07-31 17:44Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Severity
Important
Notes
Topic: Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
Security Fix(es):
* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)
* automation-controller: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643)
* automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)
* automation-gateway: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (CVE-2026-44492)
* automation-gateway: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (CVE-2026-44496)
* automation-gateway: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (CVE-2026-44494)
* automation-gateway: Axios: Information disclosure of proxy credentials via HTTP redirects (CVE-2026-44486)
* automation-gateway: Axios: Information disclosure of proxy credentials via redirect flows (CVE-2026-44487)
* automation-gateway: Axios: Denial of Service due to unenforced request and response size limits (CVE-2026-44488)
* automation-gateway: Axios: Information disclosure due to prototype pollution vulnerability (CVE-2026-44495)
* automation-gateway: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)
* automation-gateway: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget (CVE-2026-42044)
* automation-gateway: fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)
* automation-gateway: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)
* automation-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing (CVE-2026-12382)
* python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)
* receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)
* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For details about this release, refer to the release notes listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.
8.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
154 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
7.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
150 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.
9.0 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
158 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
126 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
148 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Vendor Fix
fix
|
Known not affected
154 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — | ||
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — | ||
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
References
144 references
Acknowledgments
Tommaso Bona
Red Hat
Chris Meyers
Independent security researcher
Martin Brodeur
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n* automation-controller: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (CVE-2026-8643)\n* automation-controller: urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)\n* automation-gateway: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization (CVE-2026-44492)\n* automation-gateway: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name (CVE-2026-44496)\n* automation-gateway: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution (CVE-2026-44494)\n* automation-gateway: Axios: Information disclosure of proxy credentials via HTTP redirects (CVE-2026-44486)\n* automation-gateway: Axios: Information disclosure of proxy credentials via redirect flows (CVE-2026-44487)\n* automation-gateway: Axios: Denial of Service due to unenforced request and response size limits (CVE-2026-44488)\n* automation-gateway: Axios: Information disclosure due to prototype pollution vulnerability (CVE-2026-44495)\n* automation-gateway: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)\n* automation-gateway: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget (CVE-2026-42044)\n* automation-gateway: fast-uri: Path traversal vulnerability allows bypass of security policies (CVE-2026-6321)\n* automation-gateway: lodash: Arbitrary code execution via untrusted input in template imports (CVE-2026-4800)\n* automation-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing (CVE-2026-12382)\n* python3.12-pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)\n* receptor: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting (CVE-2026-25681)\n* receptor: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* receptor: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* receptor: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n* receptor: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nFor details about this release, refer to the release notes listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42078",
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading"
},
{
"category": "external",
"summary": "2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "2460927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
},
{
"category": "external",
"summary": "2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "2489126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489126"
},
{
"category": "external",
"summary": "2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42078.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-07-31T17:44:33+00:00",
"generator": {
"date": "2026-07-31T17:44:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:42078",
"initial_release_date": "2026-07-20T16:12:52+00:00",
"revision_history": [
{
"date": "2026-07-20T16:12:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-20T16:12:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T17:44:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.5::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product": {
"name": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.src",
"product_id": "ansible-core-1:2.16.19-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product_id": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el9ap.src",
"product": {
"name": "automation-hub-0:4.10.16-1.el9ap.src",
"product_id": "automation-hub-0:4.10.16-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"product_id": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"product_id": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.src",
"product_id": "receptor-0:1.6.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.src",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.src",
"product_id": "automation-controller-0:4.6.30-2.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el9ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"product_id": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el8ap.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el8ap.src",
"product_id": "ansible-core-1:2.16.19-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el8ap?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"product_id": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el8ap.src",
"product": {
"name": "automation-hub-0:4.10.16-1.el8ap.src",
"product_id": "automation-hub-0:4.10.16-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"product_id": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"product_id": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.src",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.src",
"product_id": "receptor-0:1.6.6-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.src",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.src",
"product_id": "automation-controller-0:4.6.30-2.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el8ap?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-core-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product_id": "ansible-test-1:2.16.19-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product_id": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el9ap.noarch",
"product": {
"name": "automation-hub-0:4.10.16-1.el9ap.noarch",
"product_id": "automation-hub-0:4.10.16-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.20-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"product_id": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"product_id": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20260715-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"product_id": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20260715-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"product_id": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.6.30-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"product": {
"name": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"product_id": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.6.30-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"product_id": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.6.30-2.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el9ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"product": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"product_id": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"product": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"product": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"product_id": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"product_id": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el8ap.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch",
"product_id": "ansible-core-1:2.16.19-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el8ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el8ap.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el8ap.noarch",
"product_id": "ansible-test-1:2.16.19-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el8ap?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"product": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"product_id": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.50-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"product_id": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.49.63-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-hub-0:4.10.16-1.el8ap.noarch",
"product": {
"name": "automation-hub-0:4.10.16-1.el8ap.noarch",
"product_id": "automation-hub-0:4.10.16-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-hub@4.10.16-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"product": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"product_id": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.10.16-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"product": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"product_id": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway@2.5.20260715-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"product": {
"name": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"product_id": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-config@2.5.20260715-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"product": {
"name": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"product_id": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-gateway-server@2.5.20260715-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"product": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"product_id": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.1.20-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.6-1.el8ap.noarch",
"product": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch",
"product_id": "receptorctl-0:1.6.6-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.6-1.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"product": {
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"product_id": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-cli@4.6.30-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"product": {
"name": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"product_id": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-server@4.6.30-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"product": {
"name": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"product_id": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-ui@4.6.30-2.el8ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"product": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"product_id": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-ansible@0.25.6-1.el8ap?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"product_id": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.x86_64",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.x86_64",
"product_id": "receptor-0:1.6.6-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"product_id": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"product_id": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.ppc64le",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.ppc64le",
"product_id": "receptor-0:1.6.6-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"product_id": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.s390x",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.s390x",
"product_id": "automation-controller-0:4.6.30-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.s390x",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.s390x",
"product_id": "receptor-0:1.6.6-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.s390x",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.s390x",
"product_id": "automation-controller-0:4.6.30-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"product": {
"name": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"product_id": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"product": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"product_id": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"product": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.6-1.el8ap.aarch64",
"product": {
"name": "receptor-0:1.6.6-1.el8ap.aarch64",
"product_id": "receptor-0:1.6.6-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.6-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.6-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.6-1.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"product": {
"name": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"product_id": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller@4.6.30-2.el8ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"product": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"product_id": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.6.30-2.el8ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64"
},
"product_reference": "automation-controller-0:4.6.30-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-server-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.6.30-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch"
},
"product_reference": "automation-hub-0:4.10.16-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src"
},
"product_reference": "automation-hub-0:4.10.16-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.src",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el8ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"product_id": "8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el8ap.noarch",
"relates_to_product_reference": "8Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Developer-1.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5-Inside-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-0:4.6.30-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64"
},
"product_reference": "automation-controller-0:4.6.30-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-cli-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-server-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-server-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-ui-0:4.6.30-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch"
},
"product_reference": "automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
},
"product_reference": "automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-0:1.1.20-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src"
},
"product_reference": "automation-eda-controller-0:1.1.20-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch"
},
"product_reference": "automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-0:2.5.20260715-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src"
},
"product_reference": "automation-gateway-0:2.5.20260715-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch"
},
"product_reference": "automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
},
"product_reference": "automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch"
},
"product_reference": "automation-hub-0:4.10.16-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "automation-hub-0:4.10.16-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src"
},
"product_reference": "automation-hub-0:4.10.16-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src"
},
"product_reference": "python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.50-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src"
},
"product_reference": "python3.12-gitpython-0:3.1.50-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src"
},
"product_reference": "python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src"
},
"product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.49.63-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
},
"product_reference": "python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src"
},
"product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64"
},
"product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src"
},
"product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.6-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.6-1.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-6321",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-04T20:01:14.938426+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by providing a specially crafted Uniform Resource Locator (URL) containing percent-encoded path separators and dot segments. Due to incorrect processing, fast-uri would decode these elements before proper normalization, leading to distinct URLs resolving to the same internal path. This could allow an attacker to bypass security policies that rely on path-based comparisons, potentially gaining unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6321"
},
{
"category": "external",
"summary": "RHBZ#2466582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6321"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-q3j6-qgpj-74h6"
}
],
"release_date": "2026-05-04T19:31:57.253000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Path traversal vulnerability allows bypass of security policies"
},
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"acknowledgments": [
{
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-8643",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-22T23:09:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to write generated script wrappers outside the intended installation directory, leading to arbitrary file overwrite. This can severely impact system integrity and availability, and in certain scenarios, may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in pip\u0027s wheel installation process allows for arbitrary file overwrite due to path traversal. An attacker could exploit this by convincing a user to install a specially crafted malicious Python wheel. While file overwrites are limited to the installing user\u0027s permissions, using `pip install` with elevated privileges in Red Hat environments significantly increases the potential impact, potentially leading to system integrity compromise or arbitrary code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-8643"
},
{
"category": "external",
"summary": "RHBZ#2460927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-8643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-8643"
},
{
"category": "external",
"summary": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb",
"url": "https://github.com/pypa/pip/commit/8eb178480bd1a2b223f509fc430796b265158dfb"
}
],
"release_date": "2026-05-27T17:03:36.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "To mitigate this issue, users should avoid installing Python wheels from untrusted sources. It is strongly advised against using `pip install` with elevated privileges, such as `sudo`, when installing wheels. Additionally, administrators should inspect `entry_points.txt` within wheels for path separators or absolute paths before installation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite"
},
{
"acknowledgments": [
{
"names": [
"Tommaso Bona"
]
}
],
"cve": "CVE-2026-11332",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11332"
},
{
"category": "external",
"summary": "RHBZ#2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
},
{
"category": "external",
"summary": "https://github.com/ansible/ansible",
"url": "https://github.com/ansible/ansible"
}
],
"release_date": "2026-06-05T07:12:55.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
},
{
"acknowledgments": [
{
"names": [
"Chris Meyers"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-12382",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-06-16T10:01:29.314000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489126"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects AAP deployments that use mTLS-protected EDA external event streams. The Gateway component introduced in AAP 2.5 contains the Envoy proxy routing configuration. AAP 2.4 uses a different architecture (no Gateway/Envoy) and is not affected by this specific flaw, though the EDA-side trust-of-Subject-header issue (tracked separately) may still apply to AAP 2.4 deployments using mTLS with a different proxy configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12382"
},
{
"category": "external",
"summary": "RHBZ#2489126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12382"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12382",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12382"
}
],
"release_date": "2026-07-15T17:12:31.720000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n- Restrict network access to the non-mTLS EDA event stream route (/eda-event-streams/) at the firewall or load balancer level, allowing only trusted internal sources.\n- If mTLS-protected event streams are in use, ensure that only the /mtls/eda-event-streams/ route is accessible from untrusted networks.\n- Monitor EDA event stream activity for unexpected events_received counter increases that may indicate unauthorized event injection.\n- Review Envoy proxy logs for requests to the non-mTLS event stream route from unexpected source IPs.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing"
},
{
"acknowledgments": [
{
"names": [
"Martin Brodeur"
],
"organization": "Independent security researcher"
}
],
"cve": "CVE-2026-12701",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-24T02:44:10+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490703"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with \"/\" but fails to block directory traversal sequences such as \"../\" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., \"looking/normal/../../../../etc/shadow\") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an authenticated administrator can achieve arbitrary file write outside the intended export directory with fully attacker-controlled content. The FilesystemExport API is restricted to admin-level users (in Satellite, authenticated via SSL certificate; in standalone RBAC deployments, admin role only). The Pulp process runs as the \"pulp\" system user (not root), and file permission bits cannot be controlled by the attacker. However, the \"pulp\" user typically has write access to service-critical paths, and attack vectors such as cron.d entries (text-parsed, no exec bit required) or overwriting Pulp configuration remain viable depending on filesystem permissions and SELinux policy. Red Hat Satellite and Red Hat Ansible Automation Hub ship pulpcore and are affected. RHUI is not affected because end users do not have access to Pulp content creation APIs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12701"
},
{
"category": "external",
"summary": "RHBZ#2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12701"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701"
}
],
"release_date": "2026-07-20T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If FilesystemExport was never configured on your deployment, you are not affected by this issue.\n2. If FilesystemExporters exist in the database, audit them for path traversal sequences (\"../\"). Existing malicious entries must be cleaned up manually, as the validation functions documented to raise ValidationError do not actually do so in all code paths.\n3. Restrict admin-level access to the Pulp API to only trusted operators. Review and audit which accounts have administrator privileges.\n4. Ensure SELinux is in enforcing mode on Satellite/Pulp servers to limit the directories the Pulp service user can write to.\n5. Monitor filesystem changes outside of expected Pulp directories for signs of exploitation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"known_not_affected": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:12:52+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42078"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.noarch",
"8Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.src",
"8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.aarch64",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.ppc64le",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.s390x",
"8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el8ap.x86_64",
"8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el8ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:ansible-core-1:2.16.19-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:ansible-test-1:2.16.19-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.30-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.30-2.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.20-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.20-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260715-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260715-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.16-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.50-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-ansible-1:0.25.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulp-container-0:2.19.12-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pulpcore-0:3.49.63-2.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pyjwt-0:2.13.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.5:python3.12-urllib3-0:2.7.0-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.src",
"9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.6-1.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.6-1.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
}
]
}
RHSA-2026:42085
Vulnerability from csaf_redhat - Published: 2026-07-20 16:06 - Updated: 2026-07-31 13:54Summary
Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution (RCE) on the server through a two-step attack involving external requests. This vulnerability poses a significant risk, potentially allowing an attacker to take control of the affected system.
8.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in React Router and @remix-run/server-runtime. A remote attacker can exploit this vulnerability by sending certain crafted requests to the __manifest endpoint. This can lead to unbounded path expansion, consuming disproportionate server resources. The primary consequence is a denial of service (DoS), resulting in response time degradation and service unavailability for end users.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in http-proxy-middleware. A remote attacker could exploit a vulnerability in the fixRequestBody() function, which is used to re-emit a request body. By injecting carriage return and line feed characters (\r\n) into a request body key or value, an attacker can bypass security policies and validation performed by the proxy. This desynchronization between the proxy and the backend server can lead to a compromise of data integrity.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 | — |
Workaround
|
Threats
Impact
Moderate
References
59 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.6 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42085",
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42211",
"url": "https://access.redhat.com/security/cve/CVE-2026-42211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42342",
"url": "https://access.redhat.com/security/cve/CVE-2026-42342"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55603",
"url": "https://access.redhat.com/security/cve/CVE-2026-55603"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42085.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-31T13:54:03+00:00",
"generator": {
"date": "2026-07-31T13:54:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:42085",
"initial_release_date": "2026-07-20T16:06:49+00:00",
"revision_history": [
{
"date": "2026-07-20T16:06:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T13:54:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"product_id": "registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhtas-console-rhel9@sha256%3A7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rhtas-console-rhel9\u0026tag=1784105848"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64",
"product_id": "registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhtas-console-ui-rhel9@sha256%3Aeea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd?arch=amd64\u0026repository_url=registry.redhat.io/rhtas/rhtas-console-ui-rhel9\u0026tag=1784105894"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-42211",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-02T20:02:06.557013+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484115"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution (RCE) on the server through a two-step attack involving external requests. This vulnerability poses a significant risk, potentially allowing an attacker to take control of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important remote code execution flaw exists in React Router versions 7.0.0 through 7.14.1 when utilized in Framework Mode. This vulnerability requires an existing prototype pollution flaw within the application to enable a two-step attack, leading to unauthorized remote code execution on the server. Red Hat products employing React Router in Declarative Mode or Data Mode are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42211"
},
{
"category": "external",
"summary": "RHBZ#2484115",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484115"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42211"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h"
}
],
"release_date": "2026-06-02T18:18:46.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that applications using React Router are not configured in Framework Mode. Instead, utilize Declarative Mode (`\u003cBrowserRouter\u003e`) or Data Mode (`createBrowserRouter/\u003cRouterProvider\u003e`), as these modes are not susceptible to this flaw.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode"
},
{
"cve": "CVE-2026-42342",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-02T20:02:09.305521+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484116"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in React Router and @remix-run/server-runtime. A remote attacker can exploit this vulnerability by sending certain crafted requests to the __manifest endpoint. This can lead to unbounded path expansion, consuming disproportionate server resources. The primary consequence is a denial of service (DoS), resulting in response time degradation and service unavailability for end users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in React Router (Framework Mode) and Remix (@remix-run/server-runtime). Crafted requests to the __manifest endpoint can trigger unbounded path expansion, consuming disproportionate server resources and causing denial of service through response time degradation or complete service unavailability. This only affects applications using React Router Framework Mode or Remix server runtime; applications using Declarative Mode (BrowserRouter) or Data Mode (createBrowserRouter/RouterProvider) are not impacted. In Red Hat products, affected React Router components are used in internal console UIs that are deployed behind authenticated ingress, reducing the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42342"
},
{
"category": "external",
"summary": "RHBZ#2484116",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484116"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42342",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42342"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42342",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42342"
},
{
"category": "external",
"summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78",
"url": "https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78"
}
],
"release_date": "2026-06-02T18:23:02.765000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\nUpgrade to a patched version to fully mitigate the issues (ref: https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "react-router: @remix-run/server-runtime: React Router / Remix: Denial of Service via unbounded path expansion in __manifest endpoint"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-55603",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-22T21:01:20.731034+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491525"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in http-proxy-middleware. A remote attacker could exploit a vulnerability in the fixRequestBody() function, which is used to re-emit a request body. By injecting carriage return and line feed characters (\\r\\n) into a request body key or value, an attacker can bypass security policies and validation performed by the proxy. This desynchronization between the proxy and the backend server can lead to a compromise of data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as having Moderate impact for Red Hat OpenShift AI MLflow images that bundle http-proxy-middleware. Other Red Hat AI products are not affected or do not expose the vulnerable code path in normal operation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55603"
},
{
"category": "external",
"summary": "RHBZ#2491525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55603",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55603"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55603",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55603"
},
{
"category": "external",
"summary": "https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm",
"url": "https://github.com/chimurai/http-proxy-middleware/security/advisories/GHSA-gcq2-9pq2-cxqm"
}
],
"release_date": "2026-06-22T20:07:05.034000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T16:06:49+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42085"
},
{
"category": "workaround",
"details": "Restrict network access to MLflow services. Do not pass untrusted user input into proxy target or header configuration. Upgrade http-proxy-middleware when updated packages are available.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-rhel9@sha256:7a33c13a4fe493b4638f342a14d7dab93152141895771e543f3e028773bfa10f_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rhtas-console-ui-rhel9@sha256:eea5c4b6830a8fd26acfc5e0c01c01cb7dd6519f27cef4ac4874546c1dbb03bd_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "http-proxy-middleware: http-proxy-middleware: Data integrity compromise via CR/LF injection"
}
]
}
RHSA-2026:42142
Vulnerability from csaf_redhat - Published: 2026-07-20 18:19 - Updated: 2026-07-31 17:44Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update
Severity
Important
Notes
Topic: An update is now available for Red Hat Ansible Automation Platform 2.7
Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
For details about this release, refer to the release notes listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Threats
Impact
Important
A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., "looking/normal/../../../../etc/shadow") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.
9.0 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in python-multipart. A remote attacker can exploit this denial of service (DoS) vulnerability by sending a specially crafted request with an excessive number of part headers or a single very large header value during multipart/form-data parsing. This can lead to excessive CPU utilization, resulting in a denial of service for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Vendor Fix
fix
|
Known not affected
58 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Vendor Fix
fix
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — | ||
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Threats
Impact
Important
A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette's trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations.
9.1 (Critical)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Starlette where the request.form() method silently ignores configured resource limits (max_fields and max_part_size) when parsing application/x-www-form-urlencoded data. An unauthenticated attacker can exploit this by sending a urlencoded request body with an arbitrarily large number of fields or an oversized field, causing denial of service through resource exhaustion.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 | — |
Workaround
|
Threats
Impact
Important
References
124 references
Acknowledgments
Red Hat
Chris Meyers
Independent security researcher
Martin Brodeur
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Ansible Automation Platform 2.7",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nFor details about this release, refer to the release notes listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42142",
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12382",
"url": "https://access.redhat.com/security/cve/CVE-2026-12382"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12701",
"url": "https://access.redhat.com/security/cve/CVE-2026-12701"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42264",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42561",
"url": "https://access.redhat.com/security/cve/CVE-2026-42561"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48746",
"url": "https://access.redhat.com/security/cve/CVE-2026-48746"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54283",
"url": "https://access.redhat.com/security/cve/CVE-2026-54283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7/whats_new-async_updates"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42142.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update",
"tracking": {
"current_release_date": "2026-07-31T17:44:32+00:00",
"generator": {
"date": "2026-07-31T17:44:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:42142",
"initial_release_date": "2026-07-20T18:19:51+00:00",
"revision_history": [
{
"date": "2026-07-20T18:19:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T17:44:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.7",
"product": {
"name": "Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/platform-operator-bundle@sha256%3A980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/platform-operator-bundle\u0026tag=1783928656"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcp-server-rhel9@sha256%3Af709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9\u0026tag=1783916914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"product_identification_helper": {
"purl": "pkg:oci/aap-must-gather-rhel9@sha256%3Ac829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9\u0026tag=1783469942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/platform-operator-bundle@sha256%3A88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/platform-operator-bundle\u0026tag=1783928654"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ansible-builder-rhel9@sha256%3A578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9\u0026tag=1783917528"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ansible-devspaces-rhel9@sha256%3A420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9\u0026tag=1783616460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ansible-dev-tools-rhel9@sha256%3A90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9\u0026tag=1783617973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-chatbot-rhel9@sha256%3A365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9\u0026tag=1783923914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-rhel9@sha256%3A8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9\u0026tag=1783919823"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-rhel9-operator@sha256%3Aac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator\u0026tag=1783648744"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mcp-tools-rhel9@sha256%3A00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9\u0026tag=1783918403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/controller-rhel9@sha256%3A3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/controller-rhel9\u0026tag=1783921344"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"product_identification_helper": {
"purl": "pkg:oci/controller-rhel9-operator@sha256%3A72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator\u0026tag=1783628027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-rhel9@sha256%3A47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9\u0026tag=1783919124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-rhel9-operator@sha256%3A122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator\u0026tag=1783642325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-ui-rhel9@sha256%3A2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9\u0026tag=1783921190"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gateway-rhel9@sha256%3Aba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/gateway-rhel9\u0026tag=1783919486"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gateway-rhel9-operator@sha256%3Ac43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator\u0026tag=1783642564"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gateway-proxy-rhel9@sha256%3A4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9\u0026tag=1783916833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hub-rhel9@sha256%3A1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/hub-rhel9\u0026tag=1783919521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hub-rhel9-operator@sha256%3A072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator\u0026tag=1783642484"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hub-web-rhel9@sha256%3A609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9\u0026tag=1783921568"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/metrics-service-rhel9-operator@sha256%3Adc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator\u0026tag=1783555957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/metrics-service-rhel9@sha256%3A93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9\u0026tag=1783920542"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/de-minimal-rhel9@sha256%3A1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9\u0026tag=1783918892"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/de-supported-rhel9@sha256%3A724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9\u0026tag=1783920859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ee-minimal-rhel9@sha256%3A4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9\u0026tag=1783620286"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ee-minimal-rhel9@sha256%3Ac2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9\u0026tag=1783920182"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/ee-supported-rhel9@sha256%3A39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9\u0026tag=1783923018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/platform-resource-rhel9-operator@sha256%3A223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator\u0026tag=1783470998"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/platform-resource-runner-rhel9@sha256%3Ad580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9\u0026tag=1783922435"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"product_identification_helper": {
"purl": "pkg:oci/receptor-rhel9@sha256%3A940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/receptor-rhel9\u0026tag=1783917963"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcp-server-rhel9@sha256%3A20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9\u0026tag=1783916914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/aap-must-gather-rhel9@sha256%3Aa9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9\u0026tag=1783469942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ansible-builder-rhel9@sha256%3A85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9\u0026tag=1783917528"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ansible-devspaces-rhel9@sha256%3A147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9\u0026tag=1783616460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ansible-dev-tools-rhel9@sha256%3A706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9\u0026tag=1783617973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-chatbot-rhel9@sha256%3A788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9\u0026tag=1783923914"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-rhel9@sha256%3A8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9\u0026tag=1783919823"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lightspeed-rhel9-operator@sha256%3Adf59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator\u0026tag=1783648744"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mcp-tools-rhel9@sha256%3Ae8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9\u0026tag=1783918403"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"product_identification_helper": {
"purl": "pkg:oci/controller-rhel9@sha256%3A200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/controller-rhel9\u0026tag=1783921344"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/controller-rhel9-operator@sha256%3Aaa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator\u0026tag=1783628027"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-rhel9@sha256%3Aeb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9\u0026tag=1783919124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-rhel9-operator@sha256%3Ac5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator\u0026tag=1783642325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eda-controller-ui-rhel9@sha256%3A435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9\u0026tag=1783921190"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gateway-rhel9@sha256%3A706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/gateway-rhel9\u0026tag=1783919486"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gateway-rhel9-operator@sha256%3A9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator\u0026tag=1783642564"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"product_identification_helper": {
"purl": "pkg:oci/gateway-proxy-rhel9@sha256%3Aed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9\u0026tag=1783916833"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hub-rhel9@sha256%3A0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/hub-rhel9\u0026tag=1783919521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hub-rhel9-operator@sha256%3A5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator\u0026tag=1783642484"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hub-web-rhel9@sha256%3Aadc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9\u0026tag=1783921568"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/metrics-service-rhel9-operator@sha256%3A0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator\u0026tag=1783555957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/metrics-service-rhel9@sha256%3A7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9\u0026tag=1783920542"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"product_identification_helper": {
"purl": "pkg:oci/de-minimal-rhel9@sha256%3A88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9\u0026tag=1783918892"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"product_identification_helper": {
"purl": "pkg:oci/de-supported-rhel9@sha256%3Abd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9\u0026tag=1783920859"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ee-minimal-rhel9@sha256%3A1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9\u0026tag=1783620286"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ee-minimal-rhel9@sha256%3A905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9\u0026tag=1783920182"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/ee-supported-rhel9@sha256%3A892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9\u0026tag=1783923018"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/platform-resource-rhel9-operator@sha256%3A85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator\u0026tag=1783470998"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/platform-resource-runner-rhel9@sha256%3Aa40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9\u0026tag=1783922435"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"product_id": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"product_identification_helper": {
"purl": "pkg:oci/receptor-rhel9@sha256%3A303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412?arch=arm64\u0026repository_url=registry.redhat.io/ansible-automation-platform-27/receptor-rhel9\u0026tag=1783917963"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64 as a component of Red Hat Ansible Automation Platform 2.7",
"product_id": "Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6322",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-05-05T11:01:00.332189+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6322"
},
{
"category": "external",
"summary": "RHBZ#2466684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
}
],
"release_date": "2026-05-05T10:29:16.378000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
},
{
"acknowledgments": [
{
"names": [
"Chris Meyers"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-12382",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-06-16T10:01:29.314000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489126"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the AAP Gateway Envoy proxy configuration. The non-mTLS route to EDA event streams does not remove the Subject HTTP header from client requests, despite the source code defining requestHeadersToRemove for this header. An unauthenticated remote attacker can inject a spoofed Subject header matching a legitimate client certificate DN to bypass mTLS authentication and inject arbitrary events into protected EDA event streams.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects AAP deployments that use mTLS-protected EDA external event streams. The Gateway component introduced in AAP 2.5 contains the Envoy proxy routing configuration. AAP 2.4 uses a different architecture (no Gateway/Envoy) and is not affected by this specific flaw, though the EDA-side trust-of-Subject-header issue (tracked separately) may still apply to AAP 2.4 deployments using mTLS with a different proxy configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12382"
},
{
"category": "external",
"summary": "RHBZ#2489126",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489126"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12382",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12382"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12382",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12382"
}
],
"release_date": "2026-07-15T17:12:31.720000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n- Restrict network access to the non-mTLS EDA event stream route (/eda-event-streams/) at the firewall or load balancer level, allowing only trusted internal sources.\n- If mTLS-protected event streams are in use, ensure that only the /mtls/eda-event-streams/ route is accessible from untrusted networks.\n- Monitor EDA event stream activity for unexpected events_received counter increases that may indicate unauthorized event injection.\n- Review Envoy proxy logs for requests to the non-mTLS event stream route from unexpected source IPs.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aap-gateway: missing requestHeadersToRemove allows mTLS bypass via Subject header spoofing"
},
{
"acknowledgments": [
{
"names": [
"Martin Brodeur"
],
"organization": "Independent security researcher"
}
],
"cve": "CVE-2026-12701",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-04-24T02:44:10+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490703"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal vulnerability was found in pulpcore. The relative_path_validator function only verifies that content paths do not begin with \"/\" but fails to block directory traversal sequences such as \"../\" anywhere in the path. An authenticated administrator can craft a relative_path containing embedded traversal sequences (e.g., \"looking/normal/../../../../etc/shadow\") that escapes the intended export directory during FilesystemExport operations. Because the file content is also user-controlled (uploaded artifact), this allows arbitrary file write to any location writable by the Pulp service user, potentially leading to service compromise or further system exploitation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because an authenticated administrator can achieve arbitrary file write outside the intended export directory with fully attacker-controlled content. The FilesystemExport API is restricted to admin-level users (in Satellite, authenticated via SSL certificate; in standalone RBAC deployments, admin role only). The Pulp process runs as the \"pulp\" system user (not root), and file permission bits cannot be controlled by the attacker. However, the \"pulp\" user typically has write access to service-critical paths, and attack vectors such as cron.d entries (text-parsed, no exec bit required) or overwriting Pulp configuration remain viable depending on filesystem permissions and SELinux policy. Red Hat Satellite and Red Hat Ansible Automation Hub ship pulpcore and are affected. RHUI is not affected because end users do not have access to Pulp content creation APIs.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12701"
},
{
"category": "external",
"summary": "RHBZ#2490703",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490703"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12701",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12701"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12701"
}
],
"release_date": "2026-07-20T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If FilesystemExport was never configured on your deployment, you are not affected by this issue.\n2. If FilesystemExporters exist in the database, audit them for path traversal sequences (\"../\"). Existing malicious entries must be cleaned up manually, as the validation functions documented to raise ValidationError do not actually do so in all code paths.\n3. Restrict admin-level access to the Pulp API to only trusted operators. Review and audit which accounts have administrator privileges.\n4. Ensure SELinux is in enforcing mode on Satellite/Pulp servers to limit the directories the Pulp service user can write to.\n5. Monitor filesystem changes outside of expected Pulp directories for signs of exploitation.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42264",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-08T04:02:21.039378+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467927"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system\u0027s object prototype, Axios can unknowingly use these manipulated values in its outbound network requests. This could lead to the disclosure of sensitive information or the alteration of network communications, compromising data confidentiality and integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Prototype pollution allows information disclosure and request manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important prototype pollution flaw in Axios could result in information disclosure and network request manipulation. The vulnerability occurs when a co-located dependency in the application environment successfully pollutes the JavaScript `Object.prototype`. Under these conditions, Axios may unknowingly incorporate the manipulated properties into its outbound HTTP requests, potentially compromising data confidentiality and integrity. Exploitation is contingent on a prior successful prototype pollution attack from another component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42264"
},
{
"category": "external",
"summary": "RHBZ#2467927",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467927"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42264"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa",
"url": "https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10779",
"url": "https://github.com/axios/axios/pull/10779"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.2",
"url": "https://github.com/axios/axios/releases/tag/v1.15.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj",
"url": "https://github.com/axios/axios/security/advisories/GHSA-q8qp-cvcw-x6jj"
}
],
"release_date": "2026-05-08T03:20:24.248000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Prototype pollution allows information disclosure and request manipulation"
},
{
"cve": "CVE-2026-42561",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-13T22:01:05.319675+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477309"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in python-multipart. A remote attacker can exploit this denial of service (DoS) vulnerability by sending a specially crafted request with an excessive number of part headers or a single very large header value during multipart/form-data parsing. This can lead to excessive CPU utilization, resulting in a denial of service for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-multipart: python-multipart: Denial of Service via excessive multipart part headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in python-multipart. A remote attacker can trigger excessive CPU utilization by sending specially crafted multipart/form-data requests, leading to service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42561"
},
{
"category": "external",
"summary": "RHBZ#2477309",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477309"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42561",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42561"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42561",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42561"
},
{
"category": "external",
"summary": "https://github.com/Kludex/python-multipart/security/advisories/GHSA-pp6c-gr5w-3c5g",
"url": "https://github.com/Kludex/python-multipart/security/advisories/GHSA-pp6c-gr5w-3c5g"
}
],
"release_date": "2026-05-13T20:55:11.767000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-multipart: python-multipart: Denial of Service via excessive multipart part headers"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
},
{
"cve": "CVE-2026-48746",
"cwe": {
"id": "CWE-501",
"name": "Trust Boundary Violation"
},
"discovery_date": "2026-06-22T23:00:57.824402+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491581"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette\u0027s trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CVE-2026-48746 is an authentication bypass in the vLLM OpenAI-compatible API server. A remote attacker who can reach the vLLM endpoint directly can craft a Host header so the authentication middleware checks a different URL path than the one actually dispatched, bypassing VLLM_API_KEY / --api-key protection. Successful exploitation allows unauthorized inference API access, which can result in confidentiality loss (model/prompt abuse) and availability impact (resource exhaustion). The flaw does not provide integrity compromise or arbitrary code execution. Exploitation requires vLLM API-key authentication to be enabled and the service to be exposed without an RFC-conforming reverse proxy that normalizes the Host header. Because Red Hat AI inference offerings are commonly deployed behind OpenShift Routes or similar proxies, and because the vulnerability is conditional on deployment and configuration, the overall flaw impact is rated Important rather than Critical.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48746"
},
{
"category": "external",
"summary": "RHBZ#2491581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491581"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48746"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/pull/43426",
"url": "https://github.com/vllm-project/vllm/pull/43426"
},
{
"category": "external",
"summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6",
"url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6"
},
{
"category": "external",
"summary": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette",
"url": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette"
}
],
"release_date": "2026-06-22T21:57:28.997000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Restrict network access to the vLLM API endpoint to only trusted clients and internal networks. Implement firewall rules or network policies to limit inbound connections to the vLLM service, thereby reducing the attack surface. This operational control helps prevent unauthorized external access to the vulnerable API.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access"
},
{
"cve": "CVE-2026-54283",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-22T18:01:06.194658+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2491440"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Starlette where the request.form() method silently ignores configured resource limits (max_fields and max_part_size) when parsing application/x-www-form-urlencoded data. An unauthenticated attacker can exploit this by sending a urlencoded request body with an arbitrarily large number of fields or an oversized field, causing denial of service through resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Starlette where the request.form() method silently ignores configured resource limits (max_fields and max_part_size) when parsing application/x-www-form-urlencoded data. An unauthenticated attacker can exploit this by sending a urlencoded request body with an arbitrarily large number of fields or an oversized field, causing denial of service through resource exhaustion. This only affects applications that explicitly call request.form() on urlencoded input; JSON-only APIs and services where Starlette is a transitive dependency not used for form parsing are not affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
],
"known_not_affected": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54283"
},
{
"category": "external",
"summary": "RHBZ#2491440",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491440"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54283"
},
{
"category": "external",
"summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq",
"url": "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq"
}
],
"release_date": "2026-06-22T16:46:16.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:19:51+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.7#Upgrade",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:a9f878cae5f1eb9a1e4f0a1ce7cd515ca8fceb8ef63763a35ad9f128a453bff9_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/aap-must-gather-rhel9@sha256:c829d04f969ce975fc3cf09d75147ceffb11060651de01d1c1fcf83857506432_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:578cca10a8ed53808c18007ee25ea34ba457377ef6a6b5938073d266a7c33720_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-builder-rhel9@sha256:85b96beb39769e1d519ec289f6e4b6e01afa139a530904cce7ad1af32ce3ef53_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:706a9489aaac5fbbf33aa9cbf48aae75584716d94125b203dccc32672efe317a_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-dev-tools-rhel9@sha256:90e0aa12c4506d2e06ce828b653893652d17cf49bbebee65ae0dfea45bef80ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:147f38991795b4fe23dd721995e819d6ef252f5c585f92723d07c8dd2e4a00cb_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ansible-devspaces-rhel9@sha256:420fabe96896e0ce05bc163e5158be66fe32c70500d0db3cbb4191d8da725d89_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:72ddef638e319cbf1e32480b6c1aec55dff5c3a2d89e08c7c95deb231a605a76_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9-operator@sha256:aa2edbf58138f48206aaea1293de925b410370443123dd554a6a37f2e2c51fae_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:200bb8a5945b860743a8f59bbdd0597f1d6f61a055e774e2b0afdf311698c501_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/controller-rhel9@sha256:3ed748a31cbcb0349a0b09cd11c3e775a874c809228fd11d4458798213a6fea1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:1239025950286629bd6b658fbf223e2b1abe5245772a621c7d4b2fbae977c9fe_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-minimal-rhel9@sha256:88aa3441c75314582b0af63cddb5e46b8f123c3692bd17298eafc89199b3ef17_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:724a2482404e1c2465cf00b7c0c3e05398edd3a3edb6e7727b961cf22426e1b8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9@sha256:bd9963642b8acc7ff0131695159d9fb35f2f5deaa61edb915d208c6ac56dbb28_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:122f51c4158055179bc052a82d49fb4141fc1577e7125ac0413308374ced127d_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9-operator@sha256:c5a829f8f053b3cc89c39ebecd658172d94f91002d59bdd5f26d47d4f055d0db_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:47ead43716d5961d7dfd569615cf7ce57f2a2e8463aa0b025adcb3980507f886_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9@sha256:eb5edd1dc0d11091893c58e877b04d92cc4a95bf516413aab5af69cf43dfef1f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:2fb617496e49fb4573f3aed7b99a9cb2714cc779d016ace3fdbcd9a352494f4b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/eda-controller-ui-rhel9@sha256:435692a55aa114790834668e7a786b81bec0e23d017bf086cff57141e1d3cbbc_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:1d06dc93b89da152d1d7d3edcd0f7c6f7da34de92ee0e9d943786e68f8bb91b0_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:4c49f09466c51d9d00e6a319ee7b689b43b0ba8b56ef916aab361fdc09991cd8_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:905ab45a24f276247d69fb90a50c63386290fe0f82a18c4c0e8cd812eaf7e23f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-minimal-rhel9@sha256:c2d08d908696a97d351bbd91c98a05a02f0a39e5a805393aea410bf6758a8fd9_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:39a7ade5afe25f8bcb7baed3d1f6b403c9da9fa64c175584e848b38a02b5d6ee_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9@sha256:892b5c8e7ad1f447e4d27c3aa614b16bd73df328f2a7fe49267533aed1ef1c0e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:4512c2f1bb877178859792f7b6323287958f9b9b3dccfd60d7a63becd2e8c9f4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-proxy-rhel9@sha256:ed850c2988ca286f6948a16d139fcbc8b90b47f911d7057bf7ed5cd2dc921bfe_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:9985f9e0da6375ec6fa1b9f2890e95bd0c023dd37687fc4dae6ac6f50c751aff_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9-operator@sha256:c43b8aed97f7af608ef60ec0e45c18a9071bb67697af9a0baa70e0dc024eba5c_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:706da862880a9e0f5fa0dc5c93ba152498045d41c2a1570c21f69924de8c2925_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/gateway-rhel9@sha256:ba8549db62fdd6d95fdf2277d7e8ca2a50ffc7128153a1af77128b0092a5d808_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:072a835f191b64034da504c40b116e2d230e6e2cc0e879b44a707da20a7f0857_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9-operator@sha256:5b132fb70e7d87c39b699876c72da15ba53c5e59d1054e9e2922cfec94b13d92_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:0ca881174308716272587c6bb517529d6b48b170686ba113e63cea720fa9f76c_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-rhel9@sha256:1295e60b47ee6d4835c521769f920537b2cc62aa34dab094bce8ddaa074eccf5_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:609449f6880fcafbcca785606ef6b9cdb44ecb075a4fcf689b208c79b08cd0cd_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/hub-web-rhel9@sha256:adc32945cd9a7dcb4a24d9710c6d4531b6093896f6e38222a721819152062050_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:365af9d10525d0d7c3e20b6131ac620d4eff921bef9cad4f28fecab06d88289a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:788288d3100d6c6c4b46ef974419ca01c04f0339c03e6d0ba395705fe5f51a8f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:ac315d4a1da1d86fffcde298e433a8612a9100b1b8bdafd3413fc89dddf83768_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9-operator@sha256:df59ebf4a738b6fe95e10300d4c56b964433f7e18e53406bff85514c5de753a6_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8071f71043dadfab9f831aa2ba16aaf058f162591c00b77023b0956005b4f98a_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/lightspeed-rhel9@sha256:8fed0ee51c1d80d297cc81855a9b66c92a10b01ef36066abc76fa830c117802b_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:20eb47dc46e31c3277babe6e10e844dc796d724e1e09943aac39ce6690c11a76_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-server-rhel9@sha256:f709cbc283c1a0c85682e65f26f560f9ba643cf089301e02a819849d65695669_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:00f4047821293d2e2691f2c622ad5de474c983ed7d813b56c88d0d4c8b4f933b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/mcp-tools-rhel9@sha256:e8bb3f309a346e7b0b6514c8ed8fd20ae364352bba2f56fcf3626ec14fe210c3_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:0971f5262b15072d6cb8c67142e495c0560374c0affbe6e83cbb0ac69c556be7_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9-operator@sha256:dc5bb67b845c839e6bbb2dd9d35ab152a281ee1afa5add4c176e897e87ff3cce_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:7e5050dcb9cdc97f6e6f49e6c6d72750e3840b1870cc244f8d0f80d2085ee09f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/metrics-service-rhel9@sha256:93b514a1bf3d72f1de706470e22503b200d1ad95b3b872d44952fa32a934068b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:223817cf530fe77bc951cd2ef0bc92c246a486ab817060e63678f35cd515e1e4_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-rhel9-operator@sha256:85fb855f6dd98c9334b8c1e06bb17796eefbc314105f37da9d7a045a8f0e014e_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:a40df41a7b5ae3616f526a6111d47601f76ceb6074daed382a4c591556a2e68f_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/platform-resource-runner-rhel9@sha256:d580008dd6c09823ef6d1b77e8325578ff5d8b63af158d7bccaf52299fdffda1_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:303ac8124dd0397eb9a444aaf187571135b4496a68ead9c1f3733f7b46dbd412_arm64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform-27/receptor-rhel9@sha256:940b2d59b853db660e07a29335647eb80cb035a09ad35ee9cba732ef3a53b075_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:88f5b59c83d01c9b182148e9ce8c1788678de49ba770e163298efeadbd25390b_amd64",
"Red Hat Ansible Automation Platform 2.7:registry.redhat.io/ansible-automation-platform/platform-operator-bundle@sha256:980c9848e4fef2d12c7282bad4554326d5f779e26af1dd0e0b04a573457b0dff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS"
}
]
}
RHSA-2026:42146
Vulnerability from csaf_redhat - Published: 2026-07-20 18:41 - Updated: 2026-07-31 17:49Summary
Red Hat Security Advisory: Red Hat Quay 3.12.20
Severity
Important
Notes
Topic: Red Hat Quay 3.12.20 is now available with bug fixes.
Details: Quay 3.12.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 | — |
Workaround
|
Threats
Impact
Important
References
173 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42146",
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42146.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.20",
"tracking": {
"current_release_date": "2026-07-31T17:49:06+00:00",
"generator": {
"date": "2026-07-31T17:49:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:42146",
"initial_release_date": "2026-07-20T18:41:52+00:00",
"revision_history": [
{
"date": "2026-07-20T18:41:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T17:49:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1783751331"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Aa3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3Ad5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1783751577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Af17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3Abf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1783750687"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aa72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1783756364"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Adb891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Aa91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ab8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Af6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ae66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1783750355"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ac5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1783750853"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1783750888"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aa4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1783750391"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1783751561"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1783751865"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-20T18:41:52+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:18a8f8eb323f7a2e990f5ba912b811d849f849bcc83071f9c75fe3e098061692_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:77d5ecc1ec1ac3f389c7dc947fc92fb029532092464a8ced163669a98557eab9_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a4433acd91b173767e01d34d19f78ef3af6a9b88f2b637ea3cd822961468d746_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:a72cdc3046f1def5c3b271735acff076135f4cae6e7ee4d7e84f99674d812918_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:d5e108eaf669ea96ca91ce3ed1795da34a35b57d395ee755fce03168b5baecf9_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:25eed7620e576911a847daa544ed2da922a9b6abec2110ff00dc8f76053cc651_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bc28abfb9d2c4fce4e6db44adb3a1c15c1e34569a7dc9af3aa140fde4065c81_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:c5eddb56ff26a440621613bcc32c18a4aea37e90e22a2fd034c6c65277ae2fc5_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:f17d9058f34f22f2005d7843569ce4c1a7a5a987a63ec0de0a0e57dcda104948_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:bf5c308db195d42cb056a969ea44953e1b651138858ee525a02ab8536ff043c0_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:75f847501bab8f8c64ca89a05b07871773b3e22567a2aa721631cfc88de8ecfe_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:9acf019723b565f43c7168510556f16fbcb478ad3a00780f3e887bc915d8f363_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:a91fd07e0b3fa39a2858ab1a22e3aad3cfa51d09dec016dce9f9c2b6de83bfa3_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:ab173618612aa2af81e291cb5402311b32da66cfca02da8a016b41b8d4ad6eaa_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:555002449f4047e356874300069b4364498572151a0f537705f13d4b33f311d8_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8ea3121fa7e3903d54b99f8533a8652b7da7817d1463f29e79df7c7458c915b6_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:9d0a7e1116618faed0d326d51dac00214710b6402a692c28bd310cb3f30a0a13_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:a3719ef849b393b67846d1ff5f1b36c107c9de6ca7d2db7260a26fed45d95416_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:e66901f29aeab09d4f771c122bdd3ac5dd4f4d6e6533abf469ae77d53a9fa902_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:708d3814377d64f81094f9b947227fd051da089ce8e9bee1c723b99f160b572e_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:08b9dbff08287097e67f35cf5a1133cc25db5ecbd082cf6a07fd022b88494be6_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:7a083ae6d06472db38914d75014566cda64dbd1022195c37a04d725bb4064f85_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:b8015514cb7e59f0a68465ee42518b370dd6705a1ee2676942f2c45b9903c5f2_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:db891d7c1a8008d8ae07861b1e3999ffb3cb59696b0663cbd20576674dfab369_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:162dc1b0d8928ffde855c5fa7c30363a74ded075e9f7fd6ac1311c92dad8f170_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:60369b0688c7ff80bf3983a232cc25cdb3545a3dc14aef32584f64a2eced3801_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:6921b5638d8c1db4593ca7fece92f035bceb9fdeeb591f7f2421f1f1da6b65f2_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:f6ac4bd92907364b9c637a0314783f671066b017c167696a7683e7c85433ccf6_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:42796
Vulnerability from csaf_redhat - Published: 2026-07-21 13:53 - Updated: 2026-07-31 17:49Summary
Red Hat Security Advisory: Red Hat Quay 3.15.6
Severity
Important
Notes
Topic: Red Hat Quay 3.15.6 is now available with bug fixes.
Details: Quay 3.15.6
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client's event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.
7.4 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le | — |
Threats
Impact
Important
References
217 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.15.6 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.15.6",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:42796",
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10143",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42796.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.15.6",
"tracking": {
"current_release_date": "2026-07-31T17:49:07+00:00",
"generator": {
"date": "2026-07-31T17:49:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:42796",
"initial_release_date": "2026-07-21T13:53:09+00:00",
"revision_history": [
{
"date": "2026-07-21T13:53:09+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T17:49:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.15",
"product": {
"name": "Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Ab42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784352323"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1784352589"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ae328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784352052"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Abdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784356254"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Af6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ace5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aefcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784351626"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784351655"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784351680"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784351652"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784351641"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784351966"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64 as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"relates_to_product_reference": "Red Hat Quay 3.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le as a component of Red Hat Quay 3.15",
"product_id": "Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"cve": "CVE-2026-10143",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-10T21:02:14.712750+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kafka-python. A malicious or machine-in-the-middle broker could exploit a denial-of-service vulnerability during SCRAM authentication. By providing an excessively large iteration count, the broker can cause the client\u0027s event loop to freeze. This prevents critical operations such as sending messages, polling for new messages, and maintaining heartbeats, ultimately leading to consumer group eviction and persistent connection failures.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10143"
},
{
"category": "external",
"summary": "RHBZ#2487722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10143"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b",
"url": "https://github.com/dpkp/kafka-python/commit/6e4831444f972d169cdd11f5c8d50333cea3f19b"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3019",
"url": "https://github.com/dpkp/kafka-python/pull/3019"
},
{
"category": "external",
"summary": "https://github.com/dpkp/kafka-python/pull/3026",
"url": "https://github.com/dpkp/kafka-python/pull/3026"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py",
"url": "https://www.vulncheck.com/advisories/kafka-python-prior-to-dos-via-scram-iteration-count-in-scram-py"
}
],
"release_date": "2026-06-10T20:22:39.262000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kafka-python: kafka-python: Denial of Service via excessive SCRAM authentication iteration count"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44432",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-05-13T17:01:01.083841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44432"
},
{
"category": "external",
"summary": "RHBZ#2477154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
"url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
}
],
"release_date": "2026-05-13T15:17:12.611000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-48526",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-28T16:01:22.805235+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2482734"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48526"
},
{
"category": "external",
"summary": "RHBZ#2482734",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
}
],
"release_date": "2026-05-28T15:09:09.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T13:53:09+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:15683251d1fa746a06d2a00229341786e8c30abc3ea0524bce5bd0e9c63f35a4_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:8ef6aeb844ef1b27f6229e43eb40730cec60d1f526d591092ee8c87a1628a0f0_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/clair-rhel8@sha256:bdda83a73678d83ee2db6aeebb62ae958c510ddc6c9e2046b1eaf42a89d37f7c_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:4c927a525d6fd7d6aa6b373ff4396804c62a045aa118d556b0c6c9dfea41da82_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:025242f9cb11c9fda5f7b2aa4684e7a2c32a576bff585b2e44f72b6c92fe8bfd_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:ce5cb95162f088a8726780b2a7185030ee10cc5e24ae836d13be53d8180ec974_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:e328c7c06d260a6b926830c78ce72b527e1f414b6e7e339e8418997dce4ad3af_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:46c0ebdf3f1992ae4a517f5d23e56e59c2dd86521c0304a3413b761ba6097041_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:5a920f1ee3582f2363e19252ba095b6890729409f8d46b6996901b6b3413f665_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:71930a5bb5582a0c09c3ccdb653b409178bf1f6b9bef69077c1ac3cfa990246d_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-builder-rhel8@sha256:77d5045a39f4004c8ba16ffd2b2c5afbfaab520958267fcaa79fa5683883f0a6_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:b42d71f71cddeee129d99c9eed21f4dc136a66b9a25f5254df3ed8102fbdd038_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:93132f0d217b876d04309a20f5db54028b85cb6f973e90991510f733d4d89d00_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:934518eecd9771a5daa7dcd32b4d7afb581f7f44664f8055a2515d6ca732b004_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:f6839afafbfd659412968f5482191d9e1042454e5131e0903060563899981581_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-bundle@sha256:ab26919a782fccd8e67b91775367c4296f6a47ca524a4246b49ed63b0aa14452_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:5a0f50cd11db2e119d2cbdfbe517a02cf2d3910585e49f1cd2ff996829ff9d33_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:7b33b511fc8fbfbaf9054ef7c76b1c9ba6575b8c876aaa4f3f4c6321aa3b8011_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-operator-rhel8@sha256:efcaaa625ebc59d50a89105069e1e51f5ec93a1090e0b151c98418b604fc3f7a_ppc64le",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:3dbea8c2d897f53fde0d1bfd29732b4353d706349a7b3df2953a6f47e5decfe1_s390x",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:55b4f383ce78ceddb4e979cc892daa9e9f325ea21926f4bdea95918bf6194d98_amd64",
"Red Hat Quay 3.15:registry.redhat.io/quay/quay-rhel8@sha256:6c72e83568757192c6b755ee4f8051104825e467b6343b096caf551b75dedd46_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
}
]
}
RHSA-2026:43052
Vulnerability from csaf_redhat - Published: 2026-07-21 22:47 - Updated: 2026-07-31 17:49Summary
Red Hat Security Advisory: Red Hat Quay 3.12.20
Severity
Important
Notes
Topic: Red Hat Quay 3.12.20 is now available with bug fixes.
Details: Quay 3.12.20
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
5.2 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x | — |
Workaround
|
Threats
Impact
Important
References
173 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.12.20 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.12.20",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:43052",
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12143",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32591",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45822",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43052.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.12.20",
"tracking": {
"current_release_date": "2026-07-31T17:49:07+00:00",
"generator": {
"date": "2026-07-31T17:49:07+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:43052",
"initial_release_date": "2026-07-21T22:47:21+00:00",
"revision_history": [
{
"date": "2026-07-21T22:47:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-25T05:39:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T17:49:07+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.12",
"product": {
"name": "Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.12::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3A007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-bundle\u0026tag=1784356439"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Ac3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-bundle\u0026tag=1784355382"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Adc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8\u0026tag=1784353500"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86?arch=amd64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3Aeeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-bundle\u0026tag=1784358506"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3A30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3A66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90?arch=amd64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3Ad8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3Adc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9?arch=arm64\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aa661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Ac766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8?arch=arm64\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3Afe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3A468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Aba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c?arch=ppc64le\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel8@sha256%3A881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-container-security-operator-rhel8\u0026tag=1784355757"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel8@sha256%3A5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-bridge-operator-rhel8\u0026tag=1784354711"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel8@sha256%3A86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-builder-rhel8\u0026tag=1784353436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel8@sha256%3Aaec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1?arch=s390x\u0026repository_url=registry.redhat.io/quay/clair-rhel8\u0026tag=1784353287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel8@sha256%3Ae74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-operator-rhel8\u0026tag=1784354521"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel8@sha256%3Aa91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd?arch=s390x\u0026repository_url=registry.redhat.io/quay/quay-rhel8\u0026tag=1784353904"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"relates_to_product_reference": "Red Hat Quay 3.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64 as a component of Red Hat Quay 3.12",
"product_id": "Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64",
"relates_to_product_reference": "Red Hat Quay 3.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32591",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-03-12T15:09:38.210000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446965"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires the attacker to be authenticated as an organization administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32591"
},
{
"category": "external",
"summary": "RHBZ#2446965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32591"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45822",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-30T09:01:06.468966+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494807"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `decode-uri-component` library. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by submitting specially crafted input. The `decode()` function, when processing a large number of encoded URI components, consumes excessive CPU resources, which can lead to the application becoming unresponsive and unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "decode-uri-component: decode-uri-component: Denial of Service via crafted input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw was found in the decode-uri-component npm package. The decode() function exhibits super-linear time complexity when processing input containing many percent-encoded sequences, allowing an attacker to cause significant CPU consumption and event-loop blocking. In Red Hat products where this package is bundled (OpenShift Console, Quay, Pipelines, RHOAI, and others), exploitation requires that attacker-controlled input containing crafted percent-encoded strings reaches the decode() function without prior length validation. Red Hat rates this as Moderate severity since the impact is limited to availability with no confidentiality or integrity impact, consistent with the CNA\u0027s CVSS 4.0 assessment of 6.6 Medium.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45822"
},
{
"category": "external",
"summary": "RHBZ#2494807",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494807"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45822"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js",
"url": "https://github.com/SamVerschueren/decode-uri-component/blob/00662938dc7c6241547ae8abce7785cc13ffd3f6/index.js"
},
{
"category": "external",
"summary": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005",
"url": "https://github.com/SamVerschueren/decode-uri-component/commit/fa479dafeede7bedf04e5c89aa78f2a78c664005"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/decode-uri-component",
"url": "https://www.npmjs.com/package/decode-uri-component"
}
],
"release_date": "2026-06-30T08:05:36.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Validate and limit the length of any user-controlled input before passing it to decode-uri-component\u0027s decode() function. Inputs containing more than approximately 200 percent-encoded tokens (e.g. \u0027%ab\u0027 sequences) can trigger noticeable delays. Reject or truncate URI components exceeding a reasonable length threshold before decoding. A fix exists in the upstream repository (commit fa479daf) but has not yet been included in an npm release.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "decode-uri-component: decode-uri-component: Denial of Service via crafted input"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"known_not_affected": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-21T22:47:21+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:45d4574f48633e9f3c8495dc9301cf9e763f34dcf6a357d6d5cb94ec5e2457b9_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:468142f734967c9b0b4f894b0e085e8b6abc5bfa5e5e2283fa39bab589169adf_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:4db81a2e6fabf71b0b149e91cb75048f1898a58d3e494ce640c4815374342c86_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/clair-rhel8@sha256:aec2352526422a9254171e5315c7c9de030473565a90008c8ca4a512acfc7ad1_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:2ceea217c5db3618477887fbaa03e8f8c50c12192490fa59141c7e53cc020601_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:1f36419d267f0ebf8cfe2bc44b39310dffa4a6a76797325def110d659ddad569_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:5bd43bf7fc303c4a17b701d76b7af74e02626692b364bd2ee203a9c0040a2b38_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:d8faf0239f64f26c540ce37c07cc0a60fca0714820f9a7d18962efe7e29c0591_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-bridge-operator-rhel8@sha256:dc2972f26626a1492d1294c791f4446b9357a0b905efdff753d14b5a606f0f10_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:4867f2014f183d9113320d7ac32ff75f0eeae74a8a70f23e85c71bce7308b789_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:058a23bd8c03725bc20e1a9c14bbb8703c4d8ed048e6e7e73d801d30855d22d8_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:35d52a9b80c2fe7ce44c0432f6978c46221481c2564c57e52a13bc641aea6c40_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:86b37be69324dbf1ff1cbb6466cc4af1af1e447f95bd92c3fed291228869e3ab_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-builder-rhel8@sha256:dc823f4e764ea5849a3f7a9f13e87aea9126fe71e71edf6e2eb66641b7099c3d_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:007e613b5b6b22468ad411bb6c86b2746c5a32940edec08d9eb4e921464a7fff_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:881c3b07135e3b58a87dd594f5938a2125031cdf646152362882ec62a4c4376c_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:8f4894e944ec2632c815f9d5e342aadeb6b3a3755f12f1398936af8b769f099c_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:c3a0eb125dbce20eba957cab3865e6315eb8a33048073f69e7e1ec1869deec5c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-container-security-operator-rhel8@sha256:fe72115213b1439fa0d309b915276f711c5722cbbfc36a17c121b5cff7420a19_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-bundle@sha256:eeb44c917a431bf0aa7767ae5fc91f11dd81ee0ee3e520ad75e2b8e173bcf070_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:30f9fbbeced4531778c57025b196034a030b67d7b974ffd429e006684b90393c_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:a661e9a46ab33f04a7036faa3a395050cc74fd37a1fbd828fa6a781698f40a22_arm64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:ba7fa3bc25063653e47bffa117978b1eb8a29a6941e5556ebc579c5b6d46ddcd_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-operator-rhel8@sha256:e74476a507c77f2bf58149dc90b564d868da097e2d92b2abebb2f60f1fd0dd5e_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:66afc63628c46fd5487f36bbad8832c6acf8e7da6b28b826b618a3fd8086fd90_amd64",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a1447de1fcb5899d43d7598e2bd25e089c08b5d204ca1ffd8bfef1a85044c76c_ppc64le",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:a91dc54908b3c6f6fad385060c208942634f4989518a711c62958317cb4f3bbd_s390x",
"Red Hat Quay 3.12:registry.redhat.io/quay/quay-rhel8@sha256:c766e6c1f1947d1baf8cb2b02dea6f50606858e78405e465e8decd2f5eabbbf8_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:46885
Vulnerability from csaf_redhat - Published: 2026-07-27 16:35 - Updated: 2026-07-31 21:16Summary
Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update
Severity
Critical
Notes
Topic: The multicluster engine for Kubernetes 2.10 General Availability release images,
which add new features and enhancements, bug fixes, and updated container images.
Details: The multicluster engine for Kubernetes v2.10 images
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
9.4 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.
8.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
116 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — | ||
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to escalate any existing Object.prototype pollution in an application's dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
120 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 | — |
Workaround
|
|
| Unresolved product id: multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 | — |
Workaround
|
Threats
Impact
Important
References
162 references
Acknowledgments
Microsoft
Microsoft Security Research (MSRC)
Craftsman Software, Inc.
Kahiro Okina
GitHub: arpitjain099
Arpit Jain
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The multicluster engine for Kubernetes 2.10 General Availability release images,\nwhich add new features and enhancements, bug fixes, and updated container images.",
"title": "Topic"
},
{
"category": "general",
"text": "The multicluster engine for Kubernetes v2.10 images\n\nThe multicluster engine for Kubernetes provides the foundational components\nthat are necessary for the centralized management of multiple\nKubernetes-based clusters across data centers, public clouds, and private\nclouds.\n\nYou can use the engine to create new Red Hat OpenShift Container Platform\nclusters or to bring existing Kubernetes-based clusters under management by\nimporting them. After the clusters are managed, you can use the APIs that\nare provided by the engine to distribute configuration based on placement\npolicy.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:46885",
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-58183",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16242",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-17107",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44486",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44487",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44488",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44492",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44494",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44495",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44496",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46885.json"
}
],
"title": "Red Hat Security Advisory: multicluster engine for Kubernetes v2.10.4 security update",
"tracking": {
"current_release_date": "2026-07-31T21:16:14+00:00",
"generator": {
"date": "2026-07-31T21:16:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:46885",
"initial_release_date": "2026-07-27T16:35:23+00:00",
"revision_history": [
{
"date": "2026-07-27T16:35:23+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-27T16:35:32+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-31T21:16:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "multicluster engine for Kubernetes 2.10",
"product": {
"name": "multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:multicluster_engine:2.10::el9"
}
}
}
],
"category": "product_family",
"name": "multicluster engine for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Adf8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3Abd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3A0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ab516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Aa8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3Aa3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3Adffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Aad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ad98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7?arch=amd64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ae55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Af0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Ab57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Adb853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Aa8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Af99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Af84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3Ac907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Aaf9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Afd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3A3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Ae82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3A7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3Ad9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045?arch=arm64\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3Ae4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3A18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3Ac0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3A6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3Ad9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Afda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3A6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3Af3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3Ad53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3Adcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3A303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3Af5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3A43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3A0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3A0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3A187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aa4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3Afe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3Ab9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ac46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd?arch=ppc64le\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/addon-manager-rhel9@sha256%3A136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/addon-manager-rhel9\u0026tag=1784331588"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product_id": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"product_identification_helper": {
"purl": "pkg:oci/must-gather-rhel9@sha256%3A435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/must-gather-rhel9\u0026tag=1784849867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product_id": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"product_identification_helper": {
"purl": "pkg:oci/backplane-rhel9-operator@sha256%3A9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/backplane-rhel9-operator\u0026tag=1784913989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-agent-rhel9@sha256%3Aa749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9\u0026tag=1784245366"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-aws-rhel9@sha256%3A7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9\u0026tag=1784206185"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-api-provider-kubevirt-rhel9@sha256%3A00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9\u0026tag=1785047924"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product_id": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/capoa-bootstrap-rhel9@sha256%3Add602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9\u0026tag=1784939237"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product_id": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"product_identification_helper": {
"purl": "pkg:oci/capoa-control-plane-rhel9@sha256%3A742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9\u0026tag=1784939234"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/mce-capi-webhook-config-rhel9@sha256%3A2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9\u0026tag=1784072321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-curator-controller-rhel9@sha256%3Ab4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9\u0026tag=1784331574"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-image-set-controller-rhel9@sha256%3Adca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9\u0026tag=1784646026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-addon-rhel9@sha256%3A83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9\u0026tag=1784926469"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product_id": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-proxy-rhel9@sha256%3A9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/cluster-proxy-rhel9\u0026tag=1784342329"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterclaims-controller-rhel9@sha256%3A44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9\u0026tag=1784331577"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product_id": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clusterlifecycle-state-metrics-rhel9@sha256%3Ac446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9\u0026tag=1784341995"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product_id": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-mce-rhel9@sha256%3A17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/console-mce-rhel9\u0026tag=1784312384"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/discovery-rhel9@sha256%3A09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/discovery-rhel9\u0026tag=1784915379"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hive-rhel9@sha256%3A6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hive-rhel9\u0026tag=1784896750"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-addon-rhel9-operator@sha256%3Acd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator\u0026tag=1784564438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-cli-rhel9@sha256%3Ab7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-cli-rhel9\u0026tag=1784905760"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product_id": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"product_identification_helper": {
"purl": "pkg:oci/hypershift-rhel9-operator@sha256%3A5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/hypershift-rhel9-operator\u0026tag=1784905766"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product_id": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/image-based-install-rhel9@sha256%3Ad944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/image-based-install-rhel9\u0026tag=1785053532"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product_id": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-mce-rhel9@sha256%3A244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9\u0026tag=1784677218"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managed-serviceaccount-rhel9@sha256%3Aa10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9\u0026tag=1784683098"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product_id": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"product_identification_helper": {
"purl": "pkg:oci/managedcluster-import-controller-rhel9@sha256%3Aad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9\u0026tag=1784504317"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-manager-rhel9@sha256%3A10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/multicloud-manager-rhel9\u0026tag=1784309702"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product_id": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/placement-rhel9@sha256%3A87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/placement-rhel9\u0026tag=1783986002"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product_id": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/provider-credential-controller-rhel9@sha256%3A362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9\u0026tag=1784117302"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-rhel9@sha256%3Ac229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-rhel9\u0026tag=1784418135"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product_id": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/registration-operator-rhel9@sha256%3A5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/registration-operator-rhel9\u0026tag=1784683175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product_id": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"product_identification_helper": {
"purl": "pkg:oci/work-rhel9@sha256%3A121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072?arch=s390x\u0026repository_url=registry.redhat.io/multicluster-engine/work-rhel9\u0026tag=1784301362"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64 as a component of multicluster engine for Kubernetes 2.10",
"product_id": "multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
},
"product_reference": "registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64",
"relates_to_product_reference": "multicluster engine for Kubernetes 2.10"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-58183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2025-10-29T23:01:50.573951+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2407258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/tar package in the Go standard library. tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A specially crafted tar archive with a pax header indicating a big number of sparse regions can cause a Go program to try to allocate a large amount of memory, causing an out-of-memory condition and resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to be able to process a specially crafted GNU tar pax 1.0 archive with the application using the archive/tar package. Additionally, this issue can cause the Go application to allocate a large amount of memory, eventually leading to an out-of-memory condition and resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-58183"
},
{
"category": "external",
"summary": "RHBZ#2407258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2407258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-58183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58183"
},
{
"category": "external",
"summary": "https://go.dev/cl/709861",
"url": "https://go.dev/cl/709861"
},
{
"category": "external",
"summary": "https://go.dev/issue/75677",
"url": "https://go.dev/issue/75677"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI",
"url": "https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4014",
"url": "https://pkg.go.dev/vuln/GO-2025-4014"
}
],
"release_date": "2025-10-29T22:10:14.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/tar: Unbounded allocation when parsing GNU sparse map"
},
{
"acknowledgments": [
{
"names": [
"Microsoft Security Research (MSRC)"
],
"organization": "Microsoft"
}
],
"cve": "CVE-2026-16242",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-07-20T04:50:48.621000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the Konnectivity proxy-server used by hosted control planes allows a remote, unauthenticated attacker who can reach the agent-facing (cluster) endpoint to establish an agent connection without presenting a client certificate signed by the hosted cluster\u2019s Konnectivity CA, and without using token-based agent authentication. Because that endpoint is exposed so worker agents can connect, a successful attack can enroll an untrusted agent in the routing pool. When the proxy selects that stream for a control-plane dial, the attacker may proxy, inspect, modify, or drop control-plane-to-node traffic, affecting confidentiality, integrity, and availability of that path.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "RHBZ#2502690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://github.com/openshift/hypershift/pull/9031",
"url": "https://github.com/openshift/hypershift/pull/9031"
}
],
"release_date": "2026-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Until an update that configures Konnectivity agent authentication is applied, restrict network access to the Konnectivity cluster (agent) endpoint so that only trusted worker networks can reach it. For NodePort or LoadBalancer publishing, limit ingress to port 8091 to worker node subnet ranges. For Route-based publishing, restrict access to the Konnectivity route to trusted networks where possible. These controls reduce the chance that an unauthenticated attacker can reach the agent listener; they do not replace proper agent client-certificate (or token) authentication.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates"
},
{
"acknowledgments": [
{
"names": [
"Kahiro Okina"
],
"organization": "Craftsman Software, Inc."
},
{
"names": [
"Arpit Jain"
],
"organization": "GitHub: arpitjain099"
}
],
"cve": "CVE-2026-17107",
"cwe": {
"id": "CWE-441",
"name": "Unintended Proxy or Intermediary (\u0027Confused Deputy\u0027)"
},
"discovery_date": "2026-05-22T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506771"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE). The service-proxy appends impersonation group headers to proxied requests without first removing caller-supplied values, and the spoke ServiceAccount holds unrestricted impersonation permissions. An authenticated hub principal can inject an Impersonate-Group header to escalate to cluster-admin on every managed cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the cluster-proxy service-proxy component of Red Hat Advanced Cluster Management for Kubernetes and multicluster-engine that allows an authenticated hub principal to escalate privileges to cluster-admin across all managed clusters. This is due to improper handling of impersonation group headers, enabling unauthorized administrative access. While the impact of successful exploitation is severe, the attack requires authenticated access to the ACM hub cluster, which is a management-plane component not typically exposed to untrusted networks. Exploitation also depends on knowledge of the cluster-proxy architecture and deliberate construction of requests targeting specific managed clusters. These prerequisites significantly reduce the likelihood of opportunistic or widespread exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-17107"
},
{
"category": "external",
"summary": "RHBZ#2506771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-17107",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-17107"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17107"
}
],
"release_date": "2026-07-24T18:49:48.386000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cluster-proxy: cluster-proxy: Impersonation header injection in service-proxy grants cluster-admin on every managed cluster"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44486",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:30.944384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487947"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client, specifically in its Node.js HTTP adapter. When Axios is configured to use an authenticated proxy and follows a redirect, it may inadvertently send the Proxy-Authorization header, containing proxy credentials, to the redirect target. This can lead to the disclosure of sensitive proxy credentials to an unintended remote server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Axios Node.js HTTP adapter. Red Hat products utilizing Axios in a Node.js environment with an authenticated proxy and automatic redirects enabled are susceptible. The vulnerability arises when a request, initially sent through an authenticated proxy, is redirected to a target that no longer uses the proxy, potentially leaking `Proxy-Authorization` headers containing sensitive credentials to an untrusted remote server. This risk is heightened in deployments where applications interact with untrusted HTTP origins.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44486"
},
{
"category": "external",
"summary": "RHBZ#2487947",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487947"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44486",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44486"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44486"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc",
"url": "https://github.com/axios/axios/security/advisories/GHSA-j5f8-grm9-p9fc"
}
],
"release_date": "2026-06-11T15:39:07.714000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via HTTP redirects"
},
{
"cve": "CVE-2026-44487",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-06-11T17:01:34.091476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487948"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. During specific proxy-to-direct redirect flows in the Node.js HTTP adapter, a remote attacker could exploit this vulnerability. The Proxy-Authorization header, which contains proxy credentials and is intended only for the outbound proxy, may be forwarded to the final redirected origin. This can lead to the disclosure of sensitive proxy credentials to an unintended third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure of proxy credentials via redirect flows",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in Axios affecting Node.js environments. When an application uses Axios with an authenticated HTTP proxy and follows redirects from an HTTP to a non-proxied HTTPS destination, the Proxy-Authorization header may be inadvertently sent to the final origin server. This could lead to the exposure of sensitive proxy credentials to an unintended third party.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44487"
},
{
"category": "external",
"summary": "RHBZ#2487948",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487948"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44487",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44487"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44487"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v",
"url": "https://github.com/axios/axios/security/advisories/GHSA-p92q-9vqr-4j8v"
}
],
"release_date": "2026-06-11T15:38:25.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure of proxy credentials via redirect flows"
},
{
"cve": "CVE-2026-44488",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-11T17:01:36.836488+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487949"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Denial of Service due to unenforced request and response size limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44488"
},
{
"category": "external",
"summary": "RHBZ#2487949",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf"
}
],
"release_date": "2026-06-11T15:37:38.013000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Denial of Service due to unenforced request and response size limits"
},
{
"cve": "CVE-2026-44492",
"cwe": {
"id": "CWE-289",
"name": "Authentication Bypass by Alternate Name"
},
"discovery_date": "2026-06-11T17:00:56.761751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487938"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NO_PROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the IPv4-mapped IPv6 form of the address in a request URL. This allows the request to be routed through the proxy, potentially exposing internal services or sensitive information that should otherwise be inaccessible.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Axios, a JavaScript HTTP client library, that allows for a proxy bypass. When a `NO_PROXY` environment variable is configured to prevent direct connections to specific IPv4 addresses, an attacker can craft a request URL using the IPv4-mapped IPv6 address format. This bypasses the intended `NO_PROXY` exclusion, routing the request through the configured proxy and potentially exposing internal services or sensitive information, such as cloud instance metadata credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44492"
},
{
"category": "external",
"summary": "RHBZ#2487938",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487938"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44492"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pjwm-pj3p-43mv"
}
],
"release_date": "2026-06-11T15:29:13.890000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization"
},
{
"cve": "CVE-2026-44494",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:01:12.945664+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487942"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to escalate any existing Object.prototype pollution in an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. This enables the attacker to intercept, read, and modify all HTTP traffic, including sensitive authentication credentials. The flaw occurs because the `config.proxy` setting is susceptible to prototype pollution, allowing an attacker to inject a malicious proxy server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the Axios library allows an attacker to escalate existing prototype pollution vulnerabilities within an application\u0027s dependency tree into a full Man-in-the-Middle (MITM) attack. By injecting a malicious proxy configuration into the `Object.prototype`, an attacker can intercept, read, and modify all HTTP traffic, including sensitive authentication credentials, without direct user interaction. This poses a significant risk to data confidentiality and integrity in Red Hat products that utilize the Axios library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44494"
},
{
"category": "external",
"summary": "RHBZ#2487942",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487942"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44494"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh",
"url": "https://github.com/axios/axios/security/advisories/GHSA-35jp-ww65-95wh"
}
],
"release_date": "2026-06-11T15:32:03.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution"
},
{
"cve": "CVE-2026-44495",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-11T17:00:53.999811+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487937"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Information disclosure due to prototype pollution vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44495"
},
{
"category": "external",
"summary": "RHBZ#2487937",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44495"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw"
}
],
"release_date": "2026-06-11T15:33:12.433000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Information disclosure due to prototype pollution vulnerability"
},
{
"cve": "CVE-2026-44496",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-11T17:01:15.856386+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487943"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios. A remote attacker, by influencing the XSRF cookie name in a browser environment, could cause the application to construct a regular expression that leads to excessive processing. This can result in a client-side Denial of Service (DoS), where the affected browser tab may freeze, impacting the availability of the application for the user.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Axios can lead to a client-side Denial of Service. An attacker capable of influencing the XSRF cookie name within a browser environment could trigger excessive regular expression processing, causing the affected browser tab to freeze and degrade user availability. This issue specifically impacts browser-based applications and does not affect Node.js HTTP adapter usage, React Native, or web workers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44496"
},
{
"category": "external",
"summary": "RHBZ#2487943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44496",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44496"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44496"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-hfxv-24rg-xrqf"
}
],
"release_date": "2026-06-11T15:34:28.492000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"known_not_affected": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-27T16:35:23+00:00",
"details": "For multicluster engine for Kubernetes, see the following documentation for\ndetails on how to install the images:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/clusters/cluster_mce_overview#mce-install-intro",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:46885"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:136c6a753e310e7e6809ced784d2d5226947b97bc98e07e6792d2a7ce972660b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:278c42f76c9470e4c7533c059c362a5038e9b05494c9b58921eab0f61b4183bc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:4586d6c013397c1df40c2891772e6ef6f4e062778665512eb9834f2a421709b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/addon-manager-rhel9@sha256:8bf2e603771b91e76df3be8485acae6a502ec9269e0c40006cd5376c98cea909_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:3ae1bdf41b805f83117d9b25de06a6839813372a09ef50aab1efd1ff21b7226d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:9c379542f01419ad790e638e173ede790714f89e3a84c5cfbed915c0d34cad69_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e4b9c600b35147042a02789e2bbf4f89733e8fd06051696fc4283fa33080cb88_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/backplane-rhel9-operator@sha256:e55a2019b89df55b01dd091d2e237d9f76062d0db4e488ddb326956e4d2d4d99_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:4caf5364db9009959ef955ef9d7214b050bc687f4000681ca1bdca86d55f789d_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:6ba3b38b6abe5faa27d4a7142db92a73bbae3e0ae3c547e741e6b254c589deb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:78c38d89c9cdc0bb52077fffd74bfc06157b9da1bed85918f03951b5d02ff57e_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-bootstrap-rhel9@sha256:dd602844017c8c6273a64bbe0a855dac4b323ca93c7446cbc30dc60e19c1d4d1_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0d2fb45f17f175bd73a95efaa693e2c7aae46d404036c10a0f4e05ba3bfe0a18_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:0eead9eb76feadd64ac02d8c91cdadabc62c42e9ec7d207981800acbd998d7cb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:742a5253021aabf72b9f79a4bb808e53d5528fa013fc8c4b7c3a17987acb8bac_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/capoa-control-plane-rhel9@sha256:d9b11eb494abdcc303afce6c7af677970cd7aac128502331bd4d0915992499e3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:18941248820aeb151a8aa2057dd307cd1afecc88aee07a08e40868943342df3f_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:73a5a073ae7697113a15a6233094170720b342e7314426b4c441aea0243f78c9_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:a749a8574f96973399020db76bae72b264daa4abbef8e26fecc0bd742f31f1f3_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9@sha256:df8c54f538d078ae8ee2a093a8d549d4c3b9cd4f1e9e5682106546ac920d49ba_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:1d39d1daf3a30f31bffd2fb7f3b2864ec2b3ccbb77d59166c3582591dc7e4716_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:65855fde9a1b726d0a2d9c4c7c9684df3b6683f76c0e9ba11fc46297d99ef20d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:7fe95e8be415d1a0fbdf0874d27f5e1b233624c1fbb6dd9d992af3f52300ee2d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-aws-rhel9@sha256:867a2ad4cbead1fd6033c4f5951699bbe9b9b50c050379c96cbcbcef679ab553_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:00c71f4d0611013a0457cbc15312f0670038d8aa91e02913f063850c7cc5472e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:4096a2f3e82f4d8ea07bd0560d1da4a8b631867465ecd4d1efe4027eb49794e3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:82d8a63ecad453c6a46bd1f8a64d263a5c8d77e5abb25a35008e8c2ee4e385f0_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9@sha256:c0344283fe0d1db8232d0cc868d4ae8df482069239fb9b1a7940958fe3fc4440_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:0accf3514a20e1c55f87940482239940e24d0890a90710a55d4eca1cc8a52236_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:b4ce9efb851cc8fd51b098ec2304fc8002bb19364dc964ad0edab71e080261b7_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:f0c58912de9135b263575e85d69aceefa655536e980443e98213a649c8a20807_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9@sha256:fda0f101be0d8ca19ab0a1016b77b7b1f311d6a504b72ea92b1800d5d9c4bcb6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:6f6ff05dc645602fe0099be34ca10840aefd4fce9edc96a1e4cd4125839fc6be_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:97e707a7522331e8ce794fe57568861a0171f9c6bee952f5764e6919dcc0d5db_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:b57a4beac00ac0f02c6c0c0fab09707e4b1c0e6c4eda16e6fbdd68f312091875_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9@sha256:dca45632287f4f6d93981198a8f0f16ad9df21e8fa85b0b449d002553d1c119e_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:83604ce194f0ff9234e29e2965c3ef756638fce9585f3e0f5fe6d9e9ce9c55a5_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:876da518c2c8a3b210baa3b83bf6a86155afed40694866a58ef4b6fd7e611ed9_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:db853b7452fa7e251cd20dae18233947ac3f8a4d847eb07131fb6e5a286c9178_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-addon-rhel9@sha256:f3f61e754fe8b64ec30b1693fc2f51c0b35fca935bde4c28bb8d4ba6bdb4a0c2_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:9a645a8ed65058499a359d25e687de5fecc119cd3366e2c7628e18976110c471_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:a8eca1d91a55c30f7de7ed27ff7c3dd7e3e5bc92da07b5e3962a83ad472a0b84_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:b516d1e3998828b4587b61cbf123895d65d320bdf114691a7163d29cabf089ff_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/cluster-proxy-rhel9@sha256:d53e7ecf6ed8d57fcd095723966728cf7a92d83fbe3c9606f9f49b99c2583cab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:44edc3dc19857ed09f856ad1eb9bf9b7112f5140eec6f849f2c9bd4104909b9a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:a8935231c8e2da70582f11388b1e9020da233c7571096b6af0f2bbab31e37f07_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:dcf83e20240ea857785b600b8fea92c0af17e901d52ec13c7c4ea44ffb3fd4ab_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterclaims-controller-rhel9@sha256:f99c0b747faadbdb94066de4db67da8e37453cd60a9cbdf9b238f1b130ccf805_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:303e4c71319e628f0e851622dc967eca3d96e031348ac94547b67f16c1ebb462_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:5d94e553e99056ef4fa24ed65f5cf981b1c13ed963078225d6b994a9d66d2dcc_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:c446d64cd051c75f36ea751e5df195b37cf0a977899c3c2a7c84535c056b7077_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/clusterlifecycle-state-metrics-rhel9@sha256:f84176cba8bf5eb85dc23a9aebd5a594c85d61a0db42a1aa851176ca496ab0e8_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:17db53c4742286d6ebcff467fd1f39861eb40ce27cf4654ac592273397746fdd_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:6a4b60608669e497b34c16e8e1307346d0a0d87b2e9a28499b72639eec2cc93e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:881eee3cfb25659bcf0879b16ea26df2ab659adecb71090faf8a959dba4b5c4c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/console-mce-rhel9@sha256:c907226262eb579a07c35119959935d554bb9156932225f186933ced6789374d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:09db20dbca61b8234a389fad968d8067be31e00e2413bce49b2b783433fe600b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:61d05902ea9a676ec405f6a2083b0a93aeae8cbac769ec33cc18d2c81b63d40d_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:79e23b13a3e6a351d8d7b21e13fc4ffc6723ec24418d53d8582f5b6fcea15dd2_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/discovery-rhel9@sha256:f5a1c5eee879539c6cc74bb8441881d26bd65a7d3c0e21e3953941b91fc2968c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:467cad1d97500f4005e622796b22991037a5fadeec7c22941747595edfc145ef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:4cb75e484bb3a55ad1aadfb38024bc2a6ab3748ed5620b7f436175d0617f02e7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:6255b53df8c067958506db550d34ccbcfe38d778bd12557c3abee9696fb78e21_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hive-rhel9@sha256:69bad51115677c31814e232c0c3fadf887fdca9ef1915fdd90bec2d36882eb87_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:32abe427eb05329d282d8fc80a059b4352fdca9e3b2ff9a3e2b9c58af9ebfea7_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:43239119c8f08bbd4476c05dc1eddd00be2684732d0c08c69e5a8612b35a64b6_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:7da042f4be25c3faedb3d43c5bd297b36aa1a4a86f65a67c6ed8bae6bd971207_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-addon-rhel9-operator@sha256:cd8530dd77c17352badea4a63907495000890099fa7150b1997b30ff2201dd5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:0c0e2b5eee546eac0cfe221720e3520964aa15180be06af652fe9e8921953353_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:641748956392753eae2812affe80bad08349175142ee8a3175c485e3490f2d20_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:af9099b893e61e7b2aa9e2b4e35363143f5d416c17b3a2d9d9d5d4191cd0af7c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-cli-rhel9@sha256:b7db8bfece118d9bc3ab43b765347ed15308df6489cb173ff77cdbe90b17ba5b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:5f3f32d339927e83d33f2843cbdb498c495f03fa5d06a7cd283cf1f52102a729_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:7ec4d599d0e5b34915a1a084be439cdd6af25c8f236511bee6a711969ef02eb7_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:8e48b5c687b67a6879c598988e32fdb5da252ee328ce979f6cc2d84b15f871b0_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/hypershift-rhel9-operator@sha256:a3e9382ca6ce845db9e77351f576bd24228502ff24fdda9d08ddd3475ed17328_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:0a70f46795207eddbe1057cecb6a31741ed22f294b3ed67181811698ffc2b79c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:2f8cab2525f804b3938125af1fe9f08addd4c7cd5dcf48907817800b4550e396_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:9e1066f35642cb4e52dbf89107f5882fc51f32d4e86cf0b9aec3d26e4bd4c871_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/image-based-install-rhel9@sha256:d944d3edb5304d669f03e9b561b57157e9831eb7f94eb302fe7a1ec68d57aa6a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:244aa1cee07166edc7b611d3ba6c930d8aab4102f4d02cbe500ad035265e3fb0_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:2f890adf854462526220c24fdda4be7e9802b18c72fb172029c8034ae20f5134_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:42c6efb89a49618ff06b8f6a1cfe9257fb64b63ea088eb838acd5573bcabb550_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/kube-rbac-proxy-mce-rhel9@sha256:92df4a7c96e8b6c8a3cfa1c9bc021b54a0fd3e48b0e8bc126cbcf4e177765cfd_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:187695b375469d52f3957133fc101e75740388dc61a6083e6b0023a1b6e44fef_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:3a533df46bc6820f6ce0ec69f56d113ee6c7206ed2716febfc310bcca69fb38e_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:a10ca224cc3364f55f2d901985056c55ef4b5486ff16187b89aeb9371020c96d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managed-serviceaccount-rhel9@sha256:fd7cb48f61a4cb6d0f7a25eb4ddc1c087a5a399d2bb62d02a107f15663766152_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:3668fd2fc6b8f7dde80abf66752284298ee6a39eb49ad6eae15075eacf492791_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:66e72f5005cbd451ed5671cc59cd44d3252f90f0c8757a59bc5c8e34a84bafa8_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:a4c98480b784fce5ca1125c3c1a9230f67de79ccd7702d0d7d90f353c3202ac9_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/managedcluster-import-controller-rhel9@sha256:ad110c5274feeebdc010afd0e88348e0ffbcc7b0d2cbc4a3c60c64bdaf8f0433_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:2d23f42db501dcdb3eaa5e0ce1c6f69e93fee4778c021083e9fd3c3d8f4bad2a_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:4d6f59043b9548f7c4362b85948cbb8cadd92b7fa6eeb35ddaff63938a14ebc7_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:5bbc674de684200d566716e7f18ca549fb0dbc3a977de6dcd90110bbac47ac87_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/mce-capi-webhook-config-rhel9@sha256:bd3500bcad03f73d1cd2431471ca604be13e293624953487dae914ad312ffd6c_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:10dafa71fe0d4d267dfa88a5da82646c4534340e6ba08402c0e7ce11979f679d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:2b53c165ce1d70466945047fb1623424f9e1dc32873a2562b58ba36b2366aefb_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:9a815323c4b09f122772038cb45f128bde0d838a9993255814a8abf5e36b529e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/multicloud-manager-rhel9@sha256:dffc03e4ce76f741ca7f34de31c76f14579f9f8388c544efd9b7f4dc149aed16_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:340ad8127d2d24e1f6693e70cf1a508df7518f4b28c4e6dd35f926a174506cac_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:435d3b9bc79d57b84e32430d6cb49d7718641ca860db3e07e3efcf08c94ee849_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:733659b734425909d7cebd3c873a145116b2971eb986fe5d9627e3f0a989ff9c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/must-gather-rhel9@sha256:88d92c7ed392af9702b8c52d416d317d6df83afeefe4aad52d153b1678ff204c_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:5c3b0c6e2fef31998fbbc5c10bae35c63ba4d2aab733892e00b3e32e17fc43be_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:87c482a58f39fce639b5f5be50acaf3cf83924debfa47c6ce2a60d8d44ff580b_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:e82f30d9b0b2166844344c2b2ae2f94a96c740e2a0bc4b5fa82cff327ed09e2a_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/placement-rhel9@sha256:fe26ac47ea41687119a955622c955ad556bdde3f67182cb270ae4b3e51a169f3_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:362c4006d35f6ee065620c7d3996e78c4dc4c3e249da0958186e2c89653ada85_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:76bd59a1b7da4fccd94ce1be756841cff9377e6f0f0fa950a69ecee52f76bea3_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:ad70c7a152e5d2aec41799a79c6192e6ecdff8c9189cfc9ff9ddbe0ec8061833_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/provider-credential-controller-rhel9@sha256:b9942978615d720dfcd084729283af570bca2d965b80d141e93354eb0025df0e_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:52af9036829c505236703a715b8321463313c4d84a010575c3e7e0d5073c0991_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:5d60ad04a0c31eb912e588ba3f699ccdc74f8515d771244be2e63d7eff0c9df4_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d98b437ac316df9b2e8add5ad35127baa92e17a636f66243fbac107ab6c68576_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:d9a1ea230cfc7b62453cd9f58bf5ee9c9261588e104fe72dafb9d56eaec5662f_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:75a6c1406a1bcb6fe191eb3f18c0b6ff34e04c5ac71c0731effd63c810e20f54_amd64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:7adfc3c9db555394a5d8fa54526e03a2a1dfc266e1fa3867a0e0bfe936091d5c_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c229b761e799b1effb90d7a77babb04962cd96cd13350330c020a5b5ac617b5d_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/registration-rhel9@sha256:c46abfa87901de1814a6a77bc581bc6501437fa2d9fa332f1b886579b6d3b911_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:100a8935bf58117a9a2768791e3e99b32b35aed773838d2f537b8ec274b5babd_ppc64le",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:121c641d2e7f04d08562ee1e25ffbb7d846701aa1b5a18a6454b274563d3a072_s390x",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:748d8d6ef9168d25bbe38eb6d6b639f4e03513d828b0963470995b71e52df045_arm64",
"multicluster engine for Kubernetes 2.10:registry.redhat.io/multicluster-engine/work-rhel9@sha256:8889dd66277e605bb4210cd10d14b6a08732dd2af3ea8d5cd1512922bd5a16e7_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…